Phone One-Time Password User Guide October 2017
Table of Contents Activation Process... 2 How do I know if I need Phone OTP?... 2 Purchase Information... 2 Activation... 7 Live Video Proofing... 9 Schedule Video Proofing Appointment... 9 Reschedule Video Proofing Appointment... 11 Complete Identity Proofing... 12 Activate Telephone after Completing Live Video Proofing... 12 Credit Bureau-Based Proofing... 15 Complete Credit Bureau-Based Proofing... 15 Activate Phone after Completing Credit Based-Bureau Proofing... 17 Register Additional Phones... 19 Register Additional Phones Immediately after Registering your Initial Phone... 20 Register Additional Phones at a Later Time... 21 Manage Registered Phones... 24 Log into MAG with Phone OTP... 25 Credential Elevation... 26 1
About Phone One-Time Password Phone One-Time Password (OTP) allows you to register your mobile telephone or land- line telephone to receive one-time passwords via text or voice, and is required each time you log into Exostar s Managed Access Gateway (MAG) to access an application that requires the credential. Shared phone numbers or devices are NOT permitted. Phone OTP is used in combination with your MAG user ID and password. Using this two-factor authentication (Phone OTP + username and password) reduces the risk of unauthorized access to your account, and provides added security. You can find additional information about Phone OTP, including OTP FAQs, on the Exostar OTP Site. Activation Process In order to obtain Phone OTP, a purchase is typically required, dependent upon the partner you are doing business with. If a purchase is required and you have completed the payment process, the purchaser will receive a license key via email. After you enter the license key, you are required to complete Exostar Identity Proofing before you can complete activation of your Phone OTP credential. Identity proofing is the process of verifying your identity with Exostar, by answering credit bureau-based questions. Users who are unable to complete credit bureau-based questions are required to complete agent-based proofing with a proofing agent via webcam, someone in your company or someone within your buyer s organization. If you are based internationally, you must complete live video proofing. Answering credit bureau-based questions is not an available option for international users. How do I know if I need Phone OTP? If you currently have a security credential, you may not need Phone OTP. However, the credential requirement depends on what the application you are trying to access is set to accept. If you are unsure of the credential requirement for an application you are accessing, please contact Exostar Tier I Support. Purchase Information Before completing a purchase, please ensure you have access to the application that requires the Phone OTP credential. If you are an existing MAG account holder, you can purchase Phone OTP by logging into your Exostar Managed Access Gateway (MAG) account and clicking Billing and Support. If you do not have a MAG account, and are certain you require Phone OTP, please visit the web store. 2
Complete First Time Login if you have never logged into your MAG account. After clicking Billing and Support, click Exostar Web Store-Home Page. Select and purchase Phone OTP from Exostar s webstore. NOTE: US-based users need to purchase Phone Based OTP (US Phone Service Only). Internationally-based users need to purchase Phone Based OTP (Non-US Phone Service Only). You can also complete a purchase via your MAG account by selecting the My Account tab, then the Manage OTP sub-tab. 3
You will only see Purchase Phone OTP if you have never registered a Phone OTP credential on your account. Once you click Purchase Phone OTP, you are routed to Exostar s webstore to complete a purchase. Select the partner whose application requires you to use the Phone OTP credential. Users based in the United States need to purchase Phone Based OTP (US Phone Service Only). Users based internationally need to purchase Phone Based OTP (Non-US Phone Service Only). Once you make your selection, click Add to Cart. 4
After you click Add to Cart, the item shows in your cart. Click Proceed to Checkout. On the Payment Information page, you have the option to pay by credit card or invoice. Enter your payment information and click Continue. NOTE: If you select the invoice option, Exostar must receive and process your payment before you receive the license key to complete the activation of your credential. Additionally, if you have a Reference or PO Number for your invoice, you must submit it to transactions@exostar.com. 5
Please review your order and the disclaimer. Before submitting your order, check the box next to I have read and acknowledged the following Disclaimer. You will receive an order confirmation page with your Sales Order number (e.g. SO248098). You will also receive an email notification. If you paid with a credit card, you will receive a second email with the activation for your license key. The license key activation initiates the process for you activating your telephone. IMPORTANT: Once you use the activation on the license key, you cannot use it again. 6
Activation Log into your Exostar Managed Access Gateway (MAG) account with your username and password. Once logged in, select the My Account tab and then the Manage OTP sub-tab. From here, you have the ability to test your phone before starting the activation process. Testing your phones allows you verify your mobile telephone or landline telephone is able to receive messages. Note: Shared phone numbers or devices are NOT permitted. Before activating your license key, click What is required of me to review. Check the I understand what is required of me box when you are ready to proceed. 7
Enter the license key you received via email in the License Key field. Click Register. Confirm your legal first and last name, and select your country. Click Next. A. If you are located in the US, you will be asked to complete credit bureau-based questions with the credit bureau. B. If you do not answer the questions correctly, but the credit bureau is able to locate you with your personal information (e.g. name and address), you will receive the activation code via postal mail. C. Users unable to complete credit bureau-based questions are required to complete agentbased proofing with a proofing agent via webcam. If you click I Disagree, follow the steps to reroute to schedule a live video proofing appointment. Once you click I Disagree, the system will not reroute you back to complete credit bureau-based 8
questions. If you are located internationally, the system will direct you to schedule a live video proofing appointment. Live Video Proofing Exostar s Live Video Proofing requires you to present valid Government-issued photo identification to prove your identity to an Exostar Proofing Agent, over a live webcam-based proofing session. Please review the Acceptable Documentation requirements. Exostar Live Video Proofing takes place within a secure Cisco Webex meeting. Before your appointment, we highly recommend performing the Webex System Test on your machine, as there is very limited time during the proofing session to troubleshoot your system configuration. Excessive troubleshooting time during the proofing appointment will likely result in the need to reschedule. For additional information about live video proofing requirements, including acceptable documentation and troubleshooting, please reference the Live Video Proofing Resource page. Schedule Video Proofing Appointment Before clicking Next, review the information and confirm you have a functioning webcam by checking the box. 9
To schedule your proofing appointment, select Click! to Schedule. Select an appointment date and time from the calendar. Once you select a date and time, click Continue. 10
Enter your contact information. Click Confirm. An appointment confirmation page displays. You will receive an appointment confirmation email. An Exostar Proofer will contact you on your scheduled appointment date. The proofing appointment can take up to 30 minutes. Reschedule Video Proofing Appointment If you need to reschedule your proofing appointment, from your MAG account, select the My Account tab, Manage OTP sub-tab. Click Reschedule Proofing. 11
You are redirected to the Live video proofing page with the option to schedule a new appointment date. Complete Identity Proofing On your scheduled appointment date, an Exostar Proofer will contact you. You are required to answer a series of yes or no questions, and provide acceptable, unexpired identification via a webcam to the proofer. If you successfully complete proofing, you are provided with an activation code. In order to complete the registration process for your mobile or landline telephone, you must have your activation code. If you do not successfully complete the proofing appointment, you must reschedule your appointment from your MAG account. The Exostar Proofer cannot schedule a new proofing appointment on your behalf. Activate Telephone after Completing Live Video Proofing From your MAG account, select the My Account tab then the Manage OTP tab. Click Enter Activation Code. 12
Enter the activation code provided to you during your proofing appointment. Click Submit. Note: If you lost the activation code provided to you during your proofing, you can click Lost Activation Code. You should only select this option if you are certain you lost the code. Selecting this option requires you to complete live video proofing again. Register your mobile phone or landline phone. Please note once you register your initial phone, you can register additional phones. Select the delivery method you want to receive the OTP code on, and complete the required fields. 13
Once you complete all fields, click Send Code. Enter the verification code you received through your registered delivery method. Click Submit. Note: it may take a few minutes to deliver. Please note once you receive the code, the code expires after two minutes. You can resend the code by selecting Resend Code. 14
You will receive a message confirming successful registration. You have the ability to add an additional phone. If you would like to add another phone at a later time, click Complete. Credit Bureau-Based Proofing Exostar s credit bureau-based proofing requires you to verify your identity by answering credit bureau-based questions to register your mobile phone or landline phone. If you successfully complete these questions, you must register your phone. Credit Bureau-Based Proofing is only available for users located in the US. Complete Credit Bureau-Based Proofing After entering your license key (please see the Activation section), you need to confirm your legal first and last name, and select your country. After completing these actions. Click Next. 15
If you are US-based, you have the option to answer credit bureau-based questions. Enter the required information and review the credit bureau consent document before clicking I Agree. A list of questions display. 16
After selecting your responses, click Next. Note: If you do not answer the questions correctly, but the credit bureau is able to locate you with your personal information (e.g. name and address), you will receive the activation code via postal mail. Please see the FAQs for additional information on the mail option during the phone OTP activation process. Activate Phone after Completing Credit Based-Bureau Proofing Register your phone after you successfully answer the questions. Please note once you register your initial phone, you can register additional phones. 17
Select the delivery method you want to receive the OTP code on, and complete the required fields. Once you complete all fields, click Send Code. Enter the verification code you received through your registered delivery method. Click Submit. Note: It may take a few minutes to receive. Once you receive the code, the code expires after two minutes. You can resend the code by selecting Resend Code. You can resend the code up 18
to five times. If you are unable to receive the code after five times, try again in 30 minutes. You will receive a message stating you have successfully registered your phone. You have the ability to add an additional phone. Note: If you would like to add another phone at a later time, click Complete. Register Additional Phones Registering an additional phone allows you to have an alternative in case you lose access to the phone you initially registered. Additionally, registering an additional phone preserves your proofing. If you do not register an additional phone and lose access to the phone you initially registered, you have to complete identity proofing again to register a new phone. You can register up to three phones. 19
Register Additional Phones Immediately after Registering your Initial Phone After you register your initial phone, click Add Another Phone. Select the delivery method you want to receive the OTP code on, and complete all required fields. Click Send Code. Note: Clicking Skip to Next redirects you to the Manage OTP page. 20
Enter the verification code you received through your registered delivery method. This may take a few minutes to receive. Please note once you receive the code, it expires after two minutes. You can resend the code by selecting Resend Code. Once you successfully enter the code, the system registers and adds the phone to your account. Register Additional Phones at a Later Time If you want to register additional phones at a later time, you need to log into your MAG account WITH your Phone OTP credential. 21
From My Account, click Manage OTP and then View Details under the Manage OTP section. Click Add Phone. 22
Select the delivery method you want to receive the OTP code, and complete all required fields. Click Send Code. Enter the verification code you received through your registered delivery method. This may take a few minutes to receive. Please note once you receive the code, the code expires after two minutes. You can resend the code by selecting Resend Code. 23
Once you successfully enter the code, the system registers and adds the phone to your account. Manage Registered Phones Once you register phones to your account, you have the ability to delete phones, change delivery methods and revoke your Phone OTP credential. Please note revoking the credential is a permanent, irreversible action. Once you revoke Phone OTP, you cannot authenticate to any applications that require the use of the credential. You must register for Phone OTP again and complete the identity proofing process (video proofing or credit bureau-based proofing). You can manage telephones from My Account, Manage OTP and click View Details. 24
From View Details, you can complete activities such as deleting a phone under the Manage Phones section. Log into MAG with Phone OTP You must activate the Phone OTP credential before you can use it. To log into your MAG account, enter your username and password. Click Login. Select the phone you want to receive the OTP code. Click Send. 25
You will receive the OTP code on your telephone. Enter the code in the OTP Code field. Click Submit. Note: Once you receive the code, the code expires after two minutes. You can resend the code by selecting Resend Code. You are now logged in with your Phone OTP credential. You can confirm you have successfully logged in with Phone OTP by verifying the credential strength in the upper, right hand corner. It should say Phone OTP. Credential Elevation MAG provides you the ability to change what credential strength you are logged in with. For example, if you have Phone OTP and have logged in with only your username and password, and are trying to access an application that requires Phone OTP, you can use credential elevation to change what credential you used to login without having to log out and log back in with the correct credential. 26
Once you log into your MAG account with your username and password, MAG automatically recognizes you have registered Phone OTP to your account. MAG recognizes you have Phone OTP and provides you the ability to login using Phone OTP. If you choose not to log in using Phone OTP, you can click Skip OTP. If you select skip OTP, you will login with your username and password. You can confirm the credential strength in the upper, right hand corner of your MAG profile. The illustration below indicates that the credential strength is username and password. 27
To elevate using Phone OTP, go to My Account, Manage OTP and click Elevate. Select the phone you want to receive the OTP code so you can elevate. Click Send. 28
You will receive the OTP code on your telephone. Enter the code in the OTP Code field. Click Submit. Note: Once you receive the code, the code expires after two minutes. You can resend the code by selecting Resend Code. After you submit, the Manage OTP page displays. The credential strength (in the right hand corner) should now say Phone OTP. You have now elevated to Phone OTP. You can access the application that requires Phone OTP. You can find Applications on the Home tab. Use Phone OTP for Multiple MAG Accounts If you have multiple MAG user accounts, you can connect your accounts in order to leverage your Phone OTP credential from one account to access applications associated with another account, as long as the accounts meet the eligibility rules. Accounts are connected in a parent-child hierarchy. You must designate the account with Phone OTP as the parent, and the remaining accounts designate as the child. It is important to note child accounts CANNOT have any credentials associated with them. If they do, you cannot connect these accounts. For example, you have two MAG accounts; smithj_0001 and smithj_0002. You have Phone OTP linked to your smithj_0001. You have no credentials linked to smithj_0002. You can make smithj_0001 the parent account and smithj_0002 the child account. Once the accounts are connected, you can leverage your Phone OTP across both accounts. If you have Phone OTP linked to smithj_0001 and another credential linked to smithj_0002, you could not link the accounts. 29
Enable Account Connections To connect your active MAG accounts through Exostar s account connection feature, please visit our Account Connections page. 30