Employee Identification (Approved Domains)

ControlUp identifies the employee using a device using the following methods:

• If the account signed in on the device is a domain account, then the employee is identifed by that account.
• If the account signed in on the device is not a domain account (for example, a local account), then the employee is identified using the accounts signed in to specific applications on the device such as Microsoft 365 or Microsoft Teams.

Only identify employees in specific domains

By default, all employees in all domains are identified and given an experience score. If you don't want to identify employees in all domains, you can create a list of approved domains. Once you add at least one domain to the approved domains list, then accounts in all other domains are excluded.

To create a list of approved domains:

1. Go to Global Settings > Experience Score and select the Privacy tab.
   

2. Click +Approve Domain and enter a domain (for example, controlup.com) and click Submit. Repeat this step to add additional domains.

Primary domain

If you create a list of approved domains, you must set one of the domains to be the Primary Domain. If the account signed in on a device doesn't identify the employee and there are multiple accounts signed in to applications on the device, then the account that matches the primary domain is used to identify the employee. If none of the accounts match the primary domain, then the most commonly used account identifies the employee.

Examples

Identify an employee with the signed in user

In this example, the approved domains list is in the default state (all domains are allowed).

A user signs in with the following accounts:

• Domain account oliver.smith@controlup.com.

The employee is identified as oliver.smith@controlup.com.

Identify an employee with an application account

In this example, the approved domains list is in the default state (all domains are allowed).

A user signs in with the following accounts:

• Local account OSmith.
• Microsoft Teams account oliver.smith@controlup.com.

The employee is identified as oliver.smith@controlup.com.

Identify an employee when only certain domains are approved

In this example, controlup.com is the only domain on the approved domains list. Because it is the only domain, it is also the primary domain.

A user signs in with the following accounts:

• Domain account oliver.smith@controlup.demo
• Microsoft Teams account oliver.smith@controlup.com

The employee is identified as oliver.smith@controlup.com because controlup.com is the only domain that is on the approved domains list.

Identifying an employee with the primary domain

In this example, the following domains are on the approved domains list:

• controlup.com (primary domain)
• controlup.demo

A user signs in with the following accounts:

• Local account OSmith
• Microsoft 365 account oliver.smith@controlup.demo
• Microsoft Teams account oliver.smith@controlup.com

The employee is identified as oliver.smith@controlup.com.