Bechtel Partner Access User Guide

Transcription

1 Bechtel Partner Access User Guide IMPORTANT: For help with this process, please contact the IS&T Service Center or your local IS&T support group: IS&T Service Center Phone: US Only +1 (800) NS&E HELPDESK (NSE EMPLOYEES ONLY) (BSII Oak Ridge) (BSII Reston) or Table of Contents 1. Prerequisites Instructions for Registration and Initial Access New Application added to existing user account How to logon to your BPA Applications Troubleshooting Resolving Initial Access Issues Account Lockout Resolution Soft Token Options for Receiving OTP Codes on Mobile Devices SMS/Text Message option - text code to your Mobile Device Optimal Authenticator soft token option, with Push Touch Notification to your Mobile Device Google Authenticator soft token option to your mobile device Microsoft Authenticator soft token option to your mobile device FreeOTP soft token option on your mobile device Page 1 of 38

2 When a new Bechtel Partner Access (BPA) account is requested for an external user, the new user s data is automatically submitted to the system for processing. Upon creation of the new account, an is sent to the new user with instructions on how to complete the registration process. Please note that this link is only valid for a single use and will expire after 14 days. If you do not receive the BPA New Account Registration , please check your Junk folder. If the still cannot be found, please follow the steps in Section 5.0 (Resolving Initial Access Issues) of this user guide to gain access to the portal and complete new user registration requirements. 1. Prerequisites If you have previously accessed a Bechtel application and your account has recently been converted to a BPA account, you will need to clear the cached cookie associated with your old account in your browser as follows: 1. Click this link or enter the following URL in your browser: 2. If you manually entered the URL in your browser, press the Enter key to clear the cached cookie. 3. Once the browser cache has been cleared, reopen your browser and follow the registration steps outlined in Section 2. Note: If you access other Bechtel applications, in addition to the application recently migrated to BPA, you will continue to use your old account for those applications until you are notified that they have been migrated to BPA. After clearing your browser cache, you will encounter a login options page with the options specific to the requested application when accessing other Bechtel applications that have not yet been migrated to BPA. It may be like the one depicted below or differ. To continue using your old account for those applications, select the Non-Bechtel Users E-Bechtel option (as illustrated below) to use your old account. Page 2 of 38

3 2. Instructions for Registration and Initial Access 1. Once the registration is received, click the Complete Registration link. 2. The BPA Complete Account Registration page is used to complete the registration process. Required fields are marked with an asterisk and must be completed. Information provided as part of the access request will already be pre-populated in the applicable fields. Please verify the accuracy of this data and correct any incorrect entries. Page 3 of 38

4 3. When entering the phone number, please use the drop-down menu to select the applicable country. This will ensure proper formatting of the number. Note: All BPA accounts default to sending two-factor authentication codes via . To receive the code through a SMS message, a mobile phone number must be added as part of your registration. When entering the mobile phone number, please use the drop-down menu to select the applicable country. This will ensure proper formatting of the number. 4. When creating your password, please note the password requirements displayed in the window below the password entry fields. Once all fields have been completed, click the Submit Registration button to continue. Page 4 of 38

5 5. If all required information has been populated, the registration will be confirmed and the user will be prompted to Sign In. Click the Sign In button to continue. 6. Please review the disclaimer at the top of the logon screen and enter your password. Click the Sign In button to continue. 7. The BPA Access and Use Policy terms and conditions page will appear. After reviewing the policy, click the Accept button to continue. Note: You must accept the terms and conditions of this Access and Use Policy to proceed. 8. You will now be prompted to select the two-factor authentication method. Under One-Time Password Options, select the desired option from the menu. If you select either the or SMS/Text option, you will need to click the green button (e.g. Click here to get the SMS/Text One-Time Pass-Code if the SMS/Text option is selected) to generate sending of the two-factor one-time pass-code. Page 5 of 38

6 Note: The default One-Time Password Option is . To get SMS/Text as an option requires providing a mobile phone number during the initial registration step or subsequently updating your user profile with a mobile phone number. Adding SMS/Text as well as Soft Token (Google Authenticator, Optimal Authenticator, Microsoft Authenticator or FreeOTP) and Push ( Touch ) to Mobile Device (Optimal Authenticator) options are documented in Section 6 of this document. Configuring the Soft Token and Push ( Touch ) to Mobile Device app options on your mobile device will allow you to authenticate without having to wait for a SMS or generated code. 9. A confirmation will be displayed on the screen indicating that the one-time pass-code has been sent. Upon receipt of the two-factor one-time pass-code, enter it in the One-Time Pass-Code field and click the Sign-In button to continue. 10. Once you have successfully authenticated, the Welcome to Bechtel Partner page will be displayed. From the Applications section, click the desired application icon (e.g. FormsPlus). Page 6 of 38

7 11. From the Login page choose the Non-Bechtel Users Bechtel Partner Access button with the description Choose this option if you want to authenticate with a Bechtel Partner Access account. Unless you clear your browser cache, this selection will be cached in your browser and subsequent access requests will go directly to the application screen. 12. Congratulations, you are now connected to the requested application (e.g. FormsPlus)! Page 7 of 38

8 3. New Application added to existing user account If you already have a BPA user account and are granted access to additional Bechtel applications, you will be notified of this change through an message. This will notify you that your account has been updated to add access to <new application name>. The following example illustrates this notification for an existing BPA user who has been granted access to an additional application (e.g. FormsPlus). To access the portal and log into the newly added application, click on the Go to Bechtel Partner Access Portal link in the . The Welcome to Bechtel Partner Access page will appear in your browser prompting you to Log On. Log into BPA as you do for your other Bechtel applications. Page 8 of 38

9 Note: If you need additional support logging into the portal, please refer to Section 2, steps How to logon to your BPA Applications After completing the registration process and the initial connection to an application via the BPA, subsequent requests to access the application can either be initiated via logging into the BPA portal ( and clicking on the applicable application icon. You may also enter the application URL directly in your browser. For example, if you want to access the FormsPlus application, enter The Bechtel Partner Access Sign In page will appear prompting you for your Address. Enter your and click the Submit button. Note: If you need additional support logging into the portal, please refer to Section 2, steps 6-9. Page 9 of 38

10 5. Troubleshooting 5.1 Resolving Initial Access Issues The most frequent issue that may impact the initial registration of a new user account is a failure to receive/find the registration referenced at the beginning of this User Guide. If it is not received, check the Junk folder to see if the Spam filters of your system have marked it as junk mail. If you are still unable to find the registration , you can execute the following steps to complete the initial registration process. These steps also apply if you inadvertently delete the registration . 1) Open a browser session and connect to the following URL: Click on the I forgot my password? link. 2) The Forgot Password page will appear prompting you to enter your address. Enter it and click the Get Profile button. Page 10 of 38

11 You will receive confirmation that an has been sent to your address. Within a couple of minutes, you should receive an with a link to reset the password. Click on the Reset Password link to continue. Note: this link is only valid for 60 minutes. Should that time elapse, the steps above will need to be repeated. If you do not receive this , please check your Junk folder. If you still cannot find this , please check with your administrator to determine if a security process may be blocking from PartnerAccess@bechtel.com. Unintentional blocking of from PartnerAccess@bechtel.com by security processes has been experienced by a few users and can be quickly resolved by the administrator. Should this not prove to be the case, please contact Bechtel Partner Access Support by clicking on the green Help button at the top of the login screen ( or clicking on the Click here for Help button. Clicking on either button will provide you support contact information. Page 11 of 38

12 3) Normally the Set Password page would appear in your browser session; however, if you have not yet completed the BPA account registration, the Complete Account Registration page will appear in your browser session. 4) Required fields are marked with an asterisk and must be completed. Information that was included with the access request will already be pre-populated in the applicable fields. Please verify the accuracy of this data and correct any incorrect entries. 5) Follow the steps outlined in Section 2, steps 2-12 to complete the account registration process and access your target application. Page 12 of 38

13 5.2 Account Lockout Resolution Three incorrect Sign In attempts will lock your account. You will see the following error message! Account Locked in a red banner. To unlock your account, take the following actions: 1) Click on the I forgot my password? link below the Sign In button. 2) The Forgot Password page will appear prompting you to enter your Address. Enter it and click on the Get Profile button. Page 13 of 38

14 3) A password reset notification will be sent to your address. Click on the Reset Password link to continue. 4) The Set Password page will appear. Create a new password, ensuring you follow the listed password requirements, and click the Set Password button to continue. Page 14 of 38

15 5) You will receive confirmation in your browser session that the password has been set successfully. 6) Note: If this is your first time accessing BPA, click on the Sign in button to continue with the registration process as documented in Section 2, steps Page 15 of 38

16 6. Soft Token Options for Receiving OTP Codes on Mobile Devices This section documents installation/configuration of other options available to you for OTP and authenticating in the BPA portal. is the default option for requesting and receiving the One-Time Pass-Code (OTP), for multifactor authentication on the BPA portal. In addition, the following options are available for receiving authorization codes on Soft Tokens: 1. SMS/Text Message option, text code to your mobile device 2. Optimal Authenticator soft token option, with Push ( Touch ) to your mobile device 3. Google Authenticator soft token option to your mobile device 4. Microsoft Authenticator soft token option to your mobile device 5. FreeOTP soft token option to your mobile device 6.1 SMS/Text Message option - text code to your Mobile Device 1) Logon to the BPA portal. 2) Select My Profile from the Account Options pull down or click the My Profile button under Account Options. 3) The My Profile page will display. In the Mobile field, select the appropriate country and enter your mobile phone number. It will automatically be correctly formatted for the selected country. Page 16 of 38

17 4) Click the Update Profile button to complete the setup. 5) Subsequent authentications will offer you Text/SMS as an option in addition to for requesting an OTP password code. 6.2 Optimal Authenticator soft token option, with Push Touch Notification to your Mobile Device The Optimal Authenticator app is required to support push ( Touch ) notification to your mobile device allowing you to approve the login request without the need to enter a 6-digit code. Optimal Authenticator can be added to your iphone, ipad, or Android device by executing the following steps. 1) Download the Optimal Authenticator app to your mobile device from the applicable app store (Apple App Store or Google Play Store) and install it. 2) On your computer, logon to the BPA portal. Either expand Multi-Factor Options from the left pane and select the option to Register New Device or click on the Register New Device button under Multi-Factor Device Options. 3) The Time-based One-Time Password (TOTP) Registration page will appear. Click the Next button to start the setup wizard. Page 17 of 38

18 This will generate a One-Time-Passcode (OTP) to the user s address. This OTP will be required to continue with the TOTP device registration process. 4) The Select the Device Type dialog page will appear. Select your Device Type from the pick list iphone, ipad, Android or Other. Provide a descriptive name for the selected device in the Device Name field. This name must be unique. Enter the One-Time Passcode received from the Bechtel Partner Access followed by clicking the Next button. Page 18 of 38

19 5) The Configure Device page will appear with a displayed QR code. On your mobile device, follow the on-screen instructions (described in more detail below) to configure Optimal Authenticator. Open the Optimal Authenticator app on your mobile device. If this is the first account being added, you will get the following screen prompting you to either Scan QR code or Input account info manually. If this app has been previously configured for an account, select the + icon in the upper right hand corner to display the options to either Scan QR code or Input account info manually. Page 19 of 38

20 Touch Scan QR Code and point the camera window that appears at the QR code on your workstation s screen to complete the configuration wizard. (Alternatively, you can select Input account info manually to enter the Account/issuer and Secret data manually. After manually entering the data, select Add Account on your mobile device.) Scan QR Code Manual input Page 20 of 38

21 The Optimal Authenticator app on the mobile device will display an OTP entry for the account upon completion of the wizard. Then Click the Next button. Manual input 6) Back on your computer, a screen will appear confirming Your Multi-Factor Soft Device/Token Device has Successfully been Activated!. Click the Finish button to complete the process. 7) A listing of your configured devices will appear. 8) You will be able to use the Optimal Authenticator to either: Use the push ( Touch ) notification to your mobile device or Use the one-time pass code on your mobile device, by entering it manually. Page 21 of 38

22 9) When prompted by BPA authentication on the Sign In (multi-factor) page for the second factor, select Push to Mobile Device to get the Push ( Touch ) Notification or select Soft Token to generate a TOTP 6-digit code followed by clicking on the Sign In button. If you select the Push to Mobile Device default option and click the Sign In button, you will see a message appear Push Message Sent, waiting on your reply. On your mobile device, a Push Notification (Touch ID for Optimal Authenticator ) will appear on your mobile device prompting you to touch the fingerprint reader on your mobile device. A successful touch on your fingerprint reader will produce a Login request approved notification at the bottom of the Optimal Authenticator app and you will be granted the requested access. Page 22 of 38

23 If you select the Soft Token (Manual) option, you will be prompted to enter a One-Time Pass-Code. Enter the 6-digit One-Time Pass-Code displayed in the Optimal Authenticator app on your mobile device and click the Sign In button to be granted the requested access. 6.3 Google Authenticator soft token option to your mobile device Google Authenticator is a time-based one-time passcode (TOTP) app can be added to your iphone, ipad, or Android device by executing the following steps. 1) Download the Google Authenticator app to your mobile device from the applicable app store (Apple App Store or Google Play Store). 2) On your computer, logon to the BPA portal. Either expand Multi-Factor Options from the left pane and select the option to Register New Device or click on the Register New Device button under Multi-Factor Device Options. Page 23 of 38

24 3) The Time-based One-Time Password (TOTP) Registration page will appear. Click the Next button to start the setup wizard. This will generate a One-Time-Passcode (OTP) to the user s address. This OTP will be required to continue with the TOTP device registration process. Page 24 of 38

25 4) The Select Device Type dialog page will appear. Select your Device Type from the pick list iphone, ipad, Android or Other. Click the Next button to continue. Provide a descriptive name for the selected device in the Device Name field. This name must be unique. Enter the One-Time Passcode received from the Bechtel Partner Access followed by clicking the Next button. Page 25 of 38

26 5) The Configure Device page will appear with a displayed QR code. Follow the on-screen instructions (described in more detail below) to configure Google Authenticator on the selected device. On your mobile device, open the Google Authenticator app. Select the + icon in the upper right hand corner to display the options to either Scan barcode or Manual entry, which will appear at the bottom of the screen. Select Scan barcode and point the camera window that appears at the QR code on your workstation s screen to complete the configuration wizard. Alternatively, you can select Manual entry to enter the Account and Key manually. The Google Authenticator app on the mobile device will display an OTP entry for the account upon completion of the wizard. Page 26 of 38

27 6) On your computer, click the Next button on the Configure Device page. 7) A screen will appear confirming Your Multi-Factor Soft Device/Token Device has Successfully been Activated! Click the Finish button to complete the process. Page 27 of 38

28 8) When prompted by BPA authentication for the second factor at logon, select the Soft Token option and enter the 6 digit One-Time Pass-Code displayed in the Google Authenticator app on your mobile device in the One-Time Pass-Code field. Click the Sign-In button to be granted the requested access. 6.4 Microsoft Authenticator soft token option to your mobile device Microsoft Authenticator is a time-based one-time passcode (TOTP) app can be added to your iphone, ipad, Windows or Android device by executing the following steps. 1) On your mobile device, download the Microsoft Authenticator app from the applicable app store (Apple App Store or Google Play Store). 2) On your computer, logon to the BPA portal. Either expand Multi-Factor Options from the left pane and select the option to Register New Device or click on the Register New Device button under Multi-Factor Device Options. Page 28 of 38

29 3) The Time-based One-Time Password (TOTP) Registration page will appear. Click the Next button to start the setup wizard. This will generate a One-Time-Passcode (OTP) to the user s address. This OTP will be required to continue with the TOTP device registration process. 4) The Select Device Type dialog page will appear. Select your Device Type from the pick list iphone, ipad, Android or Other. Click the Next button to continue. Page 29 of 38

30 Provide a descriptive name for the selected device in the Device Title field. This name must be unique. Enter the One-Time Passcode received from the Bechtel Partner Access followed by clicking the Next button. 5) The Configure Device page will appear with a displayed QR code. On your mobile device, follow the on-screen instructions (described in more detail below) to configure Microsoft Authenticator on the selected device. Open the Microsoft Authenticator app on your mobile device. Page 30 of 38

31 Select the + icon in the upper right hand corner to display the options to display the WHAT KIND OF ACCOUNT ARE YOU ADDING? prompt window. Select the Other (Google, Facebook, etc.) option from the listed options. You will see the Scan QR code screen prompting you to scan the QR code provided by Bechtel Partner Access. Point the camera window that appears at the QR code on your workstation s screen to complete the configuration wizard. (Alternatively, you can select or enter code manually to enter the Account name and Secret key manually.) The Microsoft Authenticator app on the mobile device will display an OTP entry for the account upon completion of the wizard. 6) On your computer, a screen will appear confirming Your Multi-Factor Soft Device/Token Device has Successfully been Activated! Click the Finish button to complete the process. Page 31 of 38

32 7) When prompted by BPA authentication for the second factor at logon, select the Soft Token option and enter the 6 digit One-Time Pass-Code displayed in the Microsoft Authenticator app on your mobile device in the One-Time Pass-Code field. Click the Sign-In button to be granted the requested access. 6.5 FreeOTP soft token option on your mobile device FreeOTP is a time-based one-time passcode (TOTP) app can be added to your iphone, ipad, or Android device by executing the following steps. 1) On your mobile device, download the FreeOTP app from the applicable app store (Apple App Store or Google Play Store). 2) On your computer, logon to the BPA portal. Either expand Multi-Factor Options from the left pane and select the option to Register New Deviceor click on the Register New Device button under Multi-Factor Device Options. Page 32 of 38

33 3) The Time-based One-Time Password (TOTP) Registration page will appear. Click the Next button to start the setup wizard. This will generate a One-Time-Passcode (OTP) to the user s address. This OTP will be required to continue with the TOTP device registration process. Page 33 of 38

34 4) The Select Device Type dialog page will appear. Select your Device Type from the pick list iphone, ipad, Android or Other. Click the Next button to continue. Provide a descriptive name for the selected device in the Device Name field. This name must be unique. Enter the One-Time Passcode received from the Bechtel Partner Access followed by clicking the Next button. Page 34 of 38

35 5) The Configure Device page will appear with a displayed QR code. On your mobile device, follow the on-screen instructions (described in more detail below) to configure FreeOTP on the selected device. Open the FreeOTP app on your mobile device. Select the QR Code icon in the upper right hand corner to get the Scan QR code screen prompting you to scan the QR code provided by Bechtel Partner Access. Point the camera window that appears at the QR code on your workstation s screen to complete the configuration wizard. Page 35 of 38

36 You will see the Scan QR code screen prompting you to scan the QR code provided by Bechtel Partner Access. Point the camera window that appears at the QR code on your workstation s screen to complete the configuration wizard. Alternatively, you can select or enter code manually to enter the Account name and Secret key manually. The FreeOTP app on the mobile device will initially display a blank OTP entry for the account upon completion of the wizard. Select that entry on your mobile device to display an OTP value. Alternatively, you can select the + button in the right-hand corner of the FreeOTP app to enter the Issuer, ID and Secret manually to configure an account entry. In this mode, the FreeOTP app also Page 36 of 38

37 provides for more granular configuration options. To complete the manual entry, touch Save in the upper right-hand corner of the app. 6) On your computer, click the Next button on the Time-Based One-Time Password (TOTP) Registration page of Bechtel Partner Access. A screen will appear confirming Your Multi-Factor Soft Device/Token Device has Successfully been Activated! Click Finish button to complete the process. 7) When prompted by BPA authentication for the second factor at logon, select the Soft Token option and enter the 6 digit One-Time Pass-Code displayed in the FreeOTP app on your mobile device in the One-Time Pass-Code field. Click the Sign-In button to be granted the requested access. Page 37 of 38

38 Page 38 of 38