Two Factor Authentication On December 15 th 2017 the Costpoint Cloud will require Two Factor Authentication when accessing User Manager and Citrix. Also, users will be required to access Costpoint Enterprise Reporting (CER) and Costpoint Analytics via Costpoint. Direct access to these applications will no longer be available. Setting up Two Factor Authentication for Citrix As of December 15 th 2017 users will be required to enter a 2 nd factor when authenticating into Citrix. Please follow the below steps to set up your 2 nd factor. 1. To complete these instructions you will have to have an app installed on your mobile device that supports Time-based One-time Password (TOTP). Examples include DUO Mobile and Google Authenticator. These apps can be found in Google Play or App Store. You may already be using a TOTP app and you can simply add a new account within the app to complete this Citrix setup. 2. Navigate to https://ctx2.deltekenterprise.com/manageotp Enter your credentials. 3. Select Add Device 4. Enter a name for this device. In this example DeltekCloud has been entered as the name. Select Go.
2 5. Open your TOTP app (DUO or Google Authenticator) on your mobile device and select the option to create a new account. Select the option to scan a barcode. Scan the barcode that is shown on your computer screen after you selected Go in the previous step. Select Done. You can also manually enter the code on the screen into the TOTP app. 6. Test your second factor authentication by selecting the Device name you entered in Step 3 and hit Test. Enter the code provided by your TOTP app and select Go. 7. Important: Log off of the Citrix management portal and close your browser. 8. Once you have successfully installed the Citrix Receiver and your 2 nd authentication factor navigate to your company s Deltek Cloud portal page and click the following link: a. Administrative Functions >> 9. Enter your Username and Password. Enter the Passcode provided by your TOTP app and click submit.
3 You can setup multiple mobile devices to work with a single Citrix account. In your TOTP app you can change the name of the account by long pressing on the account. This allows you to create a name that you will quickly recognize. If you get a new mobile device and want to use it for the second factor you must log in with your old mobile device to setup the new mobile device. If you get a new mobile device and want to use it for the second factor but you no longer have your original mobile device you must contact Deltek to reset your account. If you lose your mobile device you must contact Deltek to reset your account. Setting up Two Factor Authentication for User Manager As of December 11 th 2017 users will be required to enter a 2 nd factor when authenticating into User Manager. You have two options. You can use either Google Authenticator or a One-time password via email. Please follow the below steps to set up your 2 nd factor. 1. If you select the Google Authenticator method you are required to have Google Authenticator installed on your mobile device. Google Authenticator can be downloaded from the Google Play store. Note: Although the instructions refer to Google Authenticator it is expected that other one time password authentication apps can be used (DUO is not supported). 2. Navigate to the Manage User Accounts >> link on your Deltek Cloud Portal page. 3. Enter your credentials and select Login. 4. Select either Google Authenticator (then go to step 5) or One time password via email (then go to step 7) and hit Next. 5. Open the Google Authenticator app on your mobile device and select the option to create a new account. Select either Scan a barcode or Enter a provided key to create the new account. If you selected Scan a barcode, scan the barcode presented on the screen. If you selected Enter a provided key select the Click here link on your computer screen and enter the code presented on the screen into the Google Authenticator app. Enter an account name into the app and leave the default selection as Time based.
4 6. Enter the code generated by Google Authenticator into the field on the computer screen and select Verify Code. Success!! You will know be prompted to enter a 2 nd factor when you log into User Manager. Skip to step 9. 7. After selecting One time password via email and selecting Next you will be prompted to enter your email address. Enter your email address and select Send Code. 8. Check your inbox for an email with the subject Your ADManager Plus one time password. Enter the one time password into the Enter the verification code: field on the screen and select Verify Code. 9. If you want to change the two factor authentication method you are using or use a new mobile device follow the instructions below. a. Log into User Manager b. Select My Account. You will be presented with the following screen:
5 c. Select Edit. Then choose your preferred authentication method and follow the applicable instructions above. In Google Authenticator you can change the name of the account by long pressing on the account. This allows you to create a name that you will quickly recognize. In addition to Google Authenticator, users can use other third-party, time-based authenticators such as Microsoft Authenticator or Sophos Authenticator. DUO is not supported. Follow the Google Authenticator instructions for other third-party authenticators. If you get a new mobile device and want to use it for the second factor you must log in with your old mobile device to setup the new mobile device. Follow step 9. If you get a new mobile device and want to use it for the second factor but you no longer have your original mobile device you must contact Deltek to reset your account. If you lose your mobile device you must contact Deltek to reset your account. Accessing Costpoint Enterprise Reporting (CER) and Costpoint Analytics via Costpoint 1. To provide a user with CER access you must give the user or the user group access to the ERCOGNOS (Enterprise Reporting) application. 2. To provide a user with Costpoint Analytics access you must give the user or the user group access to the BIQLIKVIEW application.