MyFloridaNet-2 (MFN-2) Customer Portal/Password Management Reference Guide

Transcription

1 MyFloridaNet-2 (MFN-2) Customer Portal/Password Management Reference Guide

2 REVISION RECORDS REVISION DATE DESCRIPTION 0 27 September 2017 Initial Submittal October 2017 Second Submittal October 2017 Initial Formal Release A Removed references to VPN and the VPN portion of the document as the VPN Reference Guide is now a separate document ii

3 TABLE OF CONTENTS Paragraph Title Page 1 INTRODUCTION CUSTOMER PORTAL ACCESS Customer Portal Request Form Downloading and Installing the RSA SecurID Token Application Import the Token Register the Token and Create a PIN USING THE PASSWORD MANAGEMENT SYSTEM Enrolling in the Password Management System Changing a Password Resetting a Password USING THE CUSTOMER PORTAL Access the Customer Portal Accessing the MFN-2 Training Server (MTS) Changing the MTS Password iii

4 LIST OF APPENDICES Appendix Title Page APPENDIX A CUSTOMER PORTAL REQUEST FORM... A-1 LIST OF ILLUSTRATIONS Figure Title Page Figure Downloaded RSA SecurID Software Token... 3 Figure Extracted RSA Token File... 3 Figure Run the Installer File... 4 Figure RSA SecurID Software Token Setup Wizard... 4 Figure Accept License Agreement... 5 Figure Typical Setup... 5 Figure Click to Install... 6 Figure ed Token Zip File... 6 Figure Extracted Token Zip File on Desktop... 7 Figure Open RSA SecurID Token Application... 7 Figure Import from File... 8 Figure Navigate to Folder on Desktop... 8 Figure OK to Import... 8 Figure Enter Token Password... 9 Figure Leave the Token Name As Is... 9 Figure Token Display... 9 Figure Register Token Link Figure RSA Self-Service Console Figure Passcode Text Box Figure PIN Creation Figure RSA My Account Page Figure Change or Forgot Password? Figure PRS Enrollment Figure Change Password Prompt Figure Enter New Password Figure Password Changed Figure PRS Login Page Figure Security Questions Setup Figure Last Name of Your First Boss Figure Name of Street on Which You Grew Up Figure Enter Address to Receive Pincode Figure Example Pincode Figure Prompt for Pincode Figure Successful PRS Enrollment iv

5 LIST OF ILLUSTRATIONS Figure Title Page Figure PRS User Home Page Figure PRS Profile Verification Figure Change or Forgot Password? Figure Change My Password Figure Enter Current Password Figure Enter New Password Figure Password Changed Figure Reset Password Identity Dialog Figure Reset the Password Figure Password Reset Successful Figure Logging into the Portal Figure DMS Customer Portal Splash Page Figure MTS Log in Prompt Figure MTS Dashboard Figure My Florida Network-2 Training Course Figure User Settings Dropdown Figure User Profile Figure Edit Profile Page Figure User Preferences Figure Change Password Dialog v

6 1 INTRODUCTION The purpose of this guide is to provide the MFN-2 customer end user with instructions on Customer Portal access, and Password Management enrollment and usage. The Customer Portal (portal) account creation process is established to provide approved MFN-2 customers with access to network resources used to monitor the performance of their service. This process includes the download and installation of a software token, which is used with the user s username and password to provide multifactor authentication protection. Once a user has portal access, they can open and use the Network Management System (NMS) tools they have been granted access to, in order to view their assets status and performance, as well as related tickets and scheduled maintenance. These are the same tools used by the MFN-2 NOC/SOC personnel. Enrollment in the Password Management system is required if using the Customer Portal. This system, also known as the Password Reset Server (PRS), allows the user to change their MFN-2 password before it expires. The user is notified a reminder before the 90-day password expiration. If the password expires or is forgotten, the PRS allows the user to reset it. Resetting a password requires the user to answer a series of questions that are set up during the enrollment process. Users should contact the MFN-2 NOC/SOC at +1 (844) 548-MFN2 (6362) if they have any difficulty with these instructions. Once connected, press 2 to reach the SOC. NOTE: The RSA soft token installation require administrator rights on the device on which they are being installed. If the user does not have administrator rights on the device, assistance from their Information Technology department will likely be necessary. NOTE: Usernames should be input as lowercase only. 2 CUSTOMER PORTAL ACCESS The Customer Portal provides access to the NMS tools as well as the MFN-2 Training Server (MTS). This access requires the series of steps outlined in this section. 2.1 Customer Portal Request Form The Customer Portal access process begins when the MFN-2 customer completes the Customer Portal Request Form. This PDF can be found at the end of this document in Appendix A. Once 1

7 completed, the form is submitted by the customer to their agency s primary or secondary Security Administrator for approval. The Security Administrator approves the request, if appropriate, and submits the request form to the MFN-2 NOC/SOC at: support@mfn2.myflorida.com. The service provider reviews and confirms the request is from an approving Security Administrator. NOTE: A primary and secondary Security Administrator must be identified per Section 5.4 of the User Guide, which is posted on the SUNCOM website. Once confirmed, the MFN-2 NOC/SOC creates the user s account and s the user with: A username and initial password A link to the RSA SecurID Token application A token.zip file A password to unlock the token.zip file The soft tokens are available for iphone, Android, or personal computer, and the selection is indicated on the Customer Portal Request Form. Administrative permissions are required on whichever platform is selected. NOTE: The example screenshots and instructions used in this Reference Guide are for a Windows computer. The steps will be similar on other platforms. 2.2 Downloading and Installing the RSA SecurID Token Application NOTE: DMS users with hard tokens should skip to Section 2.4 of this document and register the token and create a PIN as described there. To download the RSA SecurID soft token, open the Internet Explorer browser, navigate to the following URL, and click Save when prompted to save the zip file. waretoken5.0.2x86.zip. By default, the file will save to the Downloads folder, as shown in Figure

8 Figure Downloaded RSA SecurID Software Token When the download is complete, navigate to the Downloads folder, and right click the.zip file and click Extract All. Click Extract to extract the file in the destination location listed, which should be an RSASecurIDSoftwareToken folder in the Downloads folder. Double-click the extracted RSASecurIDSoftwareToken folder, then double-click the RSASecurIDToken folder inside, and then double click the RSASecurIDToken folder inside that. There should be two.msi files, as shown in Figure Double-click the RSASecurIDToken502.msi file and click Run as shown in Figure Figure Extracted RSA Token File 3

9 Figure Run the Installer File Follow the wizard to install the token as shown in Figure 2.2-4, Figure 2.2-5, Figure 2.2-6, and Figure Choose Typical when prompted for Setup Type. You may be asked to enter administrator credentials on the client device. Without administrative access, the installation will likely fail. Click Finish when the setup wizard has completed the install. Figure RSA SecurID Software Token Setup Wizard 4

10 Figure Accept License Agreement Figure Typical Setup 5

11 Figure Click to Install 2.3 Import the Token Once the application has been installed, the user s token file must be imported into it. Locate the software_token.zip file received via as shown in the redacted version in Figure 2.3-1, and click the dropdown arrow beside it, and then click Save As and save it to the Desktop. Rightclick the software_token.zip file just saved and click Extract All. Click Extract to extract the file to the Desktop, as shown in Figure Figure ed Token Zip File 6

12 Figure Extracted Token Zip File on Desktop Click the Windows Start button, and click the RSA SecurID Token application to run it, as shown in Figure Figure Open RSA SecurID Token Application Click Import from File as shown in Figure Next, click Browse and navigate to the Desktop. Locate the dms_software_token folder, and double-click it as shown in Figure Then click the.sdtid file inside of that folder and click Open. Click OK as shown in Figure A password prompt displays. 7

13 Figure Import from File Figure Navigate to Folder on Desktop Figure OK to Import Navigate to the that contains the password for the RSA SecurID token this is a different password than the user s password. Enter the ed password, as shown in Figure 2.3-7, and then click OK. Once the token has successfully imported, the user is prompted to change the name of the token, as shown in Figure Click OK to leave the name unchanged. Figure displays a successfully imported token. 8

14 Figure Enter Token Password Figure Leave the Token Name As Is Figure Token Display 9

15 2.4 Register the Token and Create a PIN Customer Portal/Password Management Reference Guide Once the RSA SecurID software token has been successfully installed, a PIN that is only known to the user must be created. Open Internet Explorer and navigate to This lands the user on the MFN-2 Customer Portal login page as shown in Figure Click Register Token. The RSA Self-Service Console displays as shown in Figure Figure Register Token Link Figure RSA Self-Service Console Enter the User ID (username) and click OK, and a Passcode text box appears as shown in Figure Enter the six digits currently displayed in the RSA SecurID Token application into the Passcode text box and click Log On. 10

16 Figure Passcode Text Box Figure displays the next screen which prompts for a PIN. While the system supports several characters, we recommend setting a four-digit PIN not related to any personally identifiable information. Enter the PIN into the New PIN and the Confirm New PIN text boxes. Finally, wait 60 seconds or until the tokencode changes on the RSA SecurID token, and enter the new code into the Next Tokencode text box. Click OK to complete the token and PIN creation process. Figure PIN Creation Figure displays an example of the My Account page resulting from the token registration process. There may be a yellow Notes area on the page that suggests the user should set up emergency authentication questions. At this time, these questions are not being used. The user can ignore this. 11

17 Figure RSA My Account Page NOTE: The user should NOT attempt to log in to the Customer Portal yet, but rather proceed to the next section, Section 3, and enroll in the Password Management System. 12

18 3 USING THE PASSWORD MANAGEMENT SYSTEM Customer Portal/Password Management Reference Guide Before logging in to the Customer Portal, the user should enroll in the Password Management System. The Password Management System, also known as the Password Reset Server (PRS), provides an easy way for the user to change or reset their password. Changing a password requires the user to know their current password. Resetting a password is done when the user has forgotten their password or is locked out. Enrollment in the PRS is required if using the Customer Portal. 3.1 Enrolling in the Password Management System To reach the Password Management System, open Internet Explorer and navigate to This will land the user on the MFN-2 Customer Portal client page as shown in Figure Click Change or Forgot Password? to jump to the PRS as shown in Figure Figure Change or Forgot Password? Figure PRS Enrollment 13

19 Before a user can reset or change their password, they must enroll in the system. To enroll, the user should enter their username (lowercase only) and password, as provided in an from the service provider, into the Username and Password text boxes. Do not change the Domain. Click Login. If, at the time of this first login, the user s password has already expired, or needs to be changed because it is the default password, the user will be prompted to change their password before they can enroll in the PRS. If this happens, the user will see the Change Password prompt as shown in Figure NOTE: If the user is not prompted to change their password at this point, the user should skip to the paragraph beginning immediately following Figure Figure Change Password Prompt After entering the username and current password, the user should click Continue to navigate to a dialog that prompts the user to enter a new password and confirm it as shown in Figure When choosing a new password, users should follow the password requirements listed below: Passwords must contain at least 14 characters Passwords must contain characters from three of the following categories: o Uppercase letters (A through Z) o Lowercase letters (a through z) o Base 10 digits (0 through 9) o Non-alphanumeric characters (for example:!, $, #, %) Passwords cannot contain the end user s username or portions of their full name 14

20 o Example: User Bob Smith cannot have a password which contains Bob or Smith Passwords cannot be the same as any of the previous 24 passwords Enter the new password in the New Password text box, enter it again in the Confirm New Password text box, and then click Change Password. If the password is successfully changed, the user will see the dialog shown in Figure Clicking Login will navigate the user to the PRS home page as shown in Figure Figure Enter New Password Figure Password Changed 15

21 Figure PRS Login Page Once on the PRS Login page, the user should enter their username and password. Leave the domain as is. Click Login. The user is then prompted to set up the security necessary for a password reset. Click Continue to begin the process as shown in Figure Answer the first two questions as shown in Figure and Figure 3.1-9, clicking Continue after each. The third question, shown in Figure , is a prompt for the user s address, to which a code will be sent. Enter the address and click Continue. Figure Security Questions Setup Figure Last Name of Your First Boss 16

22 Figure Name of Street on Which You Grew Up Figure Enter Address to Receive Pincode The system will do a test run to verify the setup was completed correctly. Enter the answers and the ed Pincode when prompted. Figure displays an example Pincode . Figure displays the Pincode prompt. If the questions are answered correctly, Test Run Successful displays as shown in Figure , indicating the user has successfully enrolled in the PRS. Click Continue to jump to the User Home page, an example of which is shown in Figure Click the Profile Information tab and click Mark as Verified to verify your account information, as shown in Figure Figure Example Pincode 17

23 Figure Prompt for Pincode Figure Successful PRS Enrollment Figure PRS User Home Page 18

24 3.2 Changing a Password Figure PRS Profile Verification MFN-2 Customer Portal passwords automatically expire after 90 days and those enrolled in the PRS will be provided with an notification as password expiration is about to occur. To change the password, open Internet Explorer and navigate to the Customer Portal client located at Click Change or Forgot Password? as shown in Figure to navigate to the PRS, as shown in Figure Click Change My Password. Users must know their password to change their password. Figure Change or Forgot Password? 19

25 Figure Change My Password The Change Password dialog displays, as shown in the example in Figure 3.2-3, and the user is prompted to enter Domain, Username, and Current Password. Leave the Domain as is. Enter the Username and Current Password and click Continue. Figure Enter Current Password The user is prompted to enter a new password and confirm it. When choosing a new password, please follow the password requirements listed below: Passwords must contain at least 14 characters Passwords must contain characters from three of the following categories: o Uppercase letters (A through Z) o Lowercase letters (a through z) o Base 10 digits (0 through 9) o Non-alphanumeric characters (for example:!, $, #, %) Passwords cannot contain the end user s username or portions of their full name o Example: User Bob Smith cannot have a password which contains Bob or Smith 20

26 Passwords cannot be the same as any of the previous 24 passwords Enter the new password in the New Password text box, enter it again in the Confirm New Password text box, and then click Change Password, as shown in Figure If the password is successfully changed, the user will see the dialog shown in Figure Clicking Login will navigate the user to the PRS home page. Figure Enter New Password 3.3 Resetting a Password Figure Password Changed If a user has forgotten their password and/or locked themselves out of the system, the user s password can be reset using the Password Reset Server. Follow the directions in Section 3.2 above, but click Reset My Password, instead of Change My Password. The Password Reset: Identity dialog will display as shown in the example in Figure Leave the Domain as is. 21

27 Enter the Username and click Continue. Customer Portal/Password Management Reference Guide Figure Reset Password Identity Dialog The user is prompted with the security questions that were set up during the PRS enrollment and are shown in Figure If the two questions and an ed pincode are correctly provided, the user will be prompted to reset their password, as shown in Figure Figure displays if the user s password has been reset successfully. Clicking Login navigates the user to the PRS home page. Figure Reset the Password 22

28 Figure Password Reset Successful Note that all three questions are required to do a password reset. If a user cannot reset their password using the PRS, the agency s Security Administrator must the MFN-2 NOC/SOC with a request to reset it. A temporary password will be provided to the Security Administrator, who will share this information with the user. Password resets via the Security Administrator can take up to 48 hours before completed. In the event a password reset must be completed sooner, the Security Administrator should follow-up with a direct call to the MFN-2 NOC/SOC via telephone to request expedited service. The and phone number for the MFN-2 NOC/SOC are as follows: support@mfn2.myflorida.com Telephone: +1 (844) 548-MFN2 (6362) 23

29 4 USING THE CUSTOMER PORTAL Customer Portal/Password Management Reference Guide Once a user has acquired a username, password, PIN, and token, and enrolled in PRS per the directions in Section 2 and 3 of this Reference Guide, that user can log into the Customer Portal and access the NMS toolset. 4.1 Access the Customer Portal The Customer Portal client page is located at as shown in Figure The Internet Explorer browser is preferred. Enter the Username, Password, and the PASSCODE, which is the user s PIN plus the token code displaying in the RSA SecurID Token application or on the hard token. Leave the Domain as MFN2 and click Logon. The user will be navigated to the Customer Portal splash page which displays the NMS toolset available to the user. In the example in Figure 4.1-2, the DMS user has access to some tools that may not be available to a standard MFN-2 customer user. Figure Logging into the Portal Figure DMS Customer Portal Splash Page 24

30 4.2 Accessing the MFN-2 Training Server (MTS) Customer Portal/Password Management Reference Guide At this time, it is expected that all tools except one will use Single Sign-On (SSO) for authentication. This means that once a user has logged into the portal, they will not need to enter those credentials again to access the tools. Clicking any tools link will log the user into the tool automatically, as long as they have the associated permissions. The one exception to SSO at this time is the MFN-2 Training Server (MTS). This server houses all MFN-2 training artifacts in their latest and most updated form. Users are prompted to enter local credentials when they click the MFN-2 Training Server link. Local accounts on the MTS are configured when portal accounts are created. The username will be the same as the portal username. A password will be ed to the user, and once logged into the MTS, the user can change that password. Clicking the MFN-2 Training Server link on the Customer Portal splash page prompts the user for log in credentials as shown in Figure Note that logging in as a guest is not supported. Figure MTS Log in Prompt Successful login navigates the user to the MFN-2 Training Server Dashboard as shown in Figure MFN-2 users will only have one course displayed. Click My Florida Network-2 to access the course. The course home page is displayed in Figure The Calendar in the right pane indicates any scheduled training. The training content, itself, is contained in the middle pane of the home page. In the figure, the Network Architecture training module is displayed, and within that module is the training slides and a related self-assessment. If a user scores at least 84% on an assessment, a digital badge is awarded and will display under Badges in the left pane. An assessment can be taken as many times as desired. Training content is continually updated as necessary. 25

31 Figure MTS Dashboard Figure My Florida Network-2 Training Course 4.3 Changing the MTS Password It is recommended that users change their MTS password to match their MFN-2 Customer Portal password. Click the dropdown arrow in the upper right of the screen and then click Profile, as shown in Figure On the resulting Profile page, click Edit profile as shown in Figure

32 Figure User Settings Dropdown Figure User Profile On the Edit Profile page, click Preferences as shown in Figure And finally, on the Preferences page, click Change Password, as shown in Figure Enter the Current password, the New password, and the New password (again) as shown in Figure Note that although this is a different password than the user s Customer Portal password, it may be easier to remember if it is configured to be the same. Click Save changes to save the new password. 27

33 Figure Edit Profile Page Figure User Preferences 28

34 Figure Change Password Dialog End of Customer Portal/Password Management Reference Guide 29

35 APPENDIX A CUSTOMER PORTAL REQUEST FORM A-1

36 A-2