E X O S T A R L L C D A T E : N O V E M B E R V E R S I O N : 2.0

Transcription

1 SECURE ACCESS MAN AG E R PRO VIDER AD M I NISTRAT I ON GUI DE E X O S T A R L L C D A T E : N O V E M B E R V E R S I O N : 2.0 1

2 S E C U R E A C C E S S M A N A G E R SECURE ACCESS MANAGER OVERVIEW... 3 SUMMARY... 3 DOCUMENT OBJECTIVES... 3 GETTING STARTED... 3 SECURE ACCESS MANAGER LOGIN... 3 APPROVE USERS... 5 Filter and Search for Users... 5 Process User Requests... 6 VIEW USERS... 7 Locate a User Account... 7 Suspend a User Subscription... 8 Reactivate a User s Subscription... 9 Reset User Permanent Password...10 Resend Activation VIEW ORGANIZATIONS...11 Locate an Organization...11 Suspend an Organization s Access...12 Reactivate an Organization s Access...12 SET APPROVAL SETTINGS...13 Add an Organization to the Approved List...13 Remove an Organization from the Approved List

3 Secure Access Manager Overview Summary Exostar s Secure Access Manager (SAM) is a consolidated portal used for account registration, authentication, and management. The authentication gateway is used to support access to applications and services hosted by Exostar and those managed by external entities. SAM s objective is to consolidate registration processes for connecting partners and applications, while providing flexible management and invitation capabilities to application owners. Key Functions of SAM include: Extending the basic concept of Web based Single-Sign-On (SSO) to support single sign on and access to multiple applications. Supporting authentication credentials of varying assurance levels. Facilitating an organizational approach to registration, account management and application access. Provides organizational control over new user approval and access requests. Document Objectives This guide is intended for SAM users who have the Service Provider Administrator (SP Admin) role within the application. The SP Admin can approve or deny application access, view users and current application subscriptions, suspend/enable access to applications, and view organizations and set approval settings. Getting Started Secure Access Manager Login To log in to the SAM portal: 1. Go to the SAM login portal: 3

4 2. Enter your User ID or address. Click Continue. 3. Enter your password. Click Login. Note: If the system recognizes that your credential has not yet been activated, you will be prompted to resend the activation containing an activation link. 4. Upon successful login as an administrator, you are presented with the SAM Home tab and several administrative tabs. 4

5 The Provider Administration Tab The following links are available under Provider Administration tab: Approve link displays the list of all users that are awaiting approval for access to the application View Users link allows the Administrator to search for users subscribed to the application View Organizations link allows the Administrator to search for organizations subscribed to the application Approval Settings link -- allows the Administrator to add to the list of organizations whose users do not require your approval for access to the application Approve Users Working in the Approve page, Provider Administrators may perform the following functions: filter and search for users approve or deny individual requests approve or deny requests in multiples Filter and Search for Users 2. Use the search filters and fields to locate a specific approval request. The following search filter fields are available: - Filter Request By: allows you to filter by All, New, and Pending requests - Search For: allows you to enter a search criteria, such as user name, user ID, or organization information 5

6 Enter search criteria and click Search. 3. The search results are displayed. Click the Request ID link to access the desired request. Process User Requests SP Administrators can process user access requests individually (one by one), or multiple requests may be processed simultaneously. 1. Login to SAM and access the Provider Administration tab 2. To approve or deny an individual access request, select the desired request by clicking the Request Id link. To approval or deny multiple requests, select the desired requests by placing a checkmark in the box next to the Request Id link. 3. Select the desired Action. Note: In order to Approve a user request, the user s account must be properly provisioned and the user must at least have the minimum role/privileges necessary. 6

7 4. A confirmation message is displayed. The user(s) will receive an advising of approval. View Users Working in the View Users page, Provider Administrators may perform the following functions: Search for user accounts View user account details, including SAM Status, Active Applications, and Pending Applications Suspend and Restore a User s application access An SP Admin can search for a user subscribed to an application on the View Users page. This page will list all users for the organization that are active, inactive, or pending. Locate a User Account Searches can be performed by using search criteria and filters. Once you locate a user, you may view and update their user profile, their user role, and the applications they have access to via the User s Details page. A user s details page contains two sections: User Profile where you can view the details of the individual s profile. Application Settings where you can view a user role, and update application access. To locate a user: 2. Click the View Users link. 7

8 3. Enter the search criteria. You may search for a user based on the following filter criteria: 4. To access the User Profile, click on the User ID link. The User Profile section contains all user information including account and contact information Note: There are two active links contained within each search result entry: - Click the USER ID link to view the profile for to this particular user - Click the ORG ID link to view the Organizational Details for this user Suspend a User Subscription There are times when a user may no longer require access to a specific application or resource, perhaps temporarily. However, the user will need to maintain an active account within SAM. The SP Administrators may modify the user status in order to suspend access to a specific resource. To suspend a user account subscription: 2. Locate the desired user. Click the User ID link. 8

9 3. The user s profile will be displayed. Scroll to the bottom to locate the Application Settings section. Click Suspend next to the desired application. 4. A confirmation message is displayed. Click OK. 5. The user s account is updated and their access to this application is suspended. An updated status for the user is presented. Reactivate a User s Subscription A Provider Administrator may reactivate a user s access to an application. To reactivate a user account subscription: 2. Locate the desired user. Click the User ID link. 3. The user s profile will be displayed. Scroll to the bottom to locate the Application Settings section. Click Activate next to the desired application. 4. A confirmation message. Is displayed. Click OK. 9

10 Reset User Permanent Password A Provider Administrator may reset an active user s permanent password. To reset a user s permanent password:. 2. Locate the desired user, and click the User ID link. 3. The user s profile will be displayed. Scroll to the bottom to locate in the Application Settings section. Click Reset Permanent Password. 4. A confirmation message is displayed and an is sent to the user address. The contains a system generated password. Resend Activation A Provider Administrator may resend the activation to an inactive user. To resend the activation Locate the desired user, and click User ID link. 3. The user s profile will be displayed. Scroll to the bottom to locate in the Application Settings section. Click Reset Permanent Password. 10

11 4. A confirmation message is displayed. View Organizations The View Organizations page provides SP Administrators the ability to view and action organizations that are subscribed to their application. Administrators may also suspend and reactive organizational access to the resource. SP Admins may take the following actions: Search for an Organization View Organization details, including Active Applications Suspend and Restore an Organizations application access Locate an Organization 2. Click the View Organizations link 3. Enter search filters criteria. Then, select the desired search filter to be applied. Click Search. Note: You can leave the search criteria fields blank and a full list of all organizations will be presented. 4. The search results are displayed. Click the Organization ID to view all org information, contacts, and administrators. 11

12 Suspend an Organization s Access 1. Locate the organization which you would like to suspend access. Click on the Org ID for the applicable organization. 2. Scroll to the bottom of the Organization s profile page. Click Suspend. 3. You are prompted to confirm the Suspension. Click OK. 4. A confirmation message is presented. Reactivate an Organization s Access An Administrator may reactivate an organization s access to the application. To reactive access: 1. Search for and find the organization for which you wish to reactive access. Click on the Org ID for the applicable organization. 12

13 2. Scroll to the bottom of the profile to the Application Settings section. Click Activate. 3. You are prompted to confirm the Activation. Click OK. 4. A confirmation message is presented. Set Approval Settings The Approval Settings page allows an SP Administrator to automatically approve all application subscription requests for the approved organizations. For example, if an organization is in the approved list, all users that request access to your application from that organization will not need to be approved by a Provider Administrator. Add an Organization to the Approved List 2. Click the Approval Setting link. 3. To add an organization to the approved list, enter the Organization ID. Select the application for which you would like to add the Organization to the approval list. Click Add Organization. 4. The page will be refreshed now showing the organization on the approved list. Note: You may add as many organizations as you wish to the approval list for each application 13

14 Remove an Organization from the Approved List A Provider Administrator may also remove an organization from the approved list. 2. Click the Approval Setting link. 3. Use the search fields to locate the desired organization. 4. Click on the Remove link to remove of an organization from the approved list. 14