Access Authenticator User Portal

How to Get There

Use the link provided by your administrator.

What it Does

The User Portal allows you to add mobile devices and maintain your authentication credentials and options.

After the Access Authenticator administrator has added you to the Access Authenticator database, you are prompted to complete your registration by downloading the Access Authenticator mobile app and updating your profile using the User Portal. See User Setup for details.

NOTE: This authentication process ties in with PCI DSS Requirement 8.2.2, which requires the user to verify their identity before modifying any authentication credential.

Options

Registered Devices

Choose this option to display your list of registered devices.

NOTE: Printed List of OTPs and Soft Token do not require registration, and are available for authentication if specified by your administrator.

Add Device

Click Add Device to open the Add Device screen where you can register a YubiKey or Mobile Device. See User Setup.

After a device has been added, click the above icon to display the following options:

Remove. Choose this option to remove the device from Access Authenticator.
Disable. Choose this option to prevent the device from being used to authenticate. You might choose this option if, for example, the device has been lost. Once a device has been disabled, it cannot be re-enabled by the user. It can only be re-enabled by the administrator. A disabled device also cannot be deleted and re-registered. Because of this, a lost or stolen device, once disabled, cannot be used to authenticate.
Set new PIN. Choose this option to set a new 4-digit PIN code (Soft Token only).
Set as default. Choose this option to tell Access Authenticator that you want to designate the device as the default for authentication.
Re-sync. Choose this option to re-sync the device with Access Authenticator. This will re-register the device with Access Authenticator's Authentication Manager.
Validate OTP. Choose this option to validate a One-Time Password.
Edit. Choose this option to open the Edit Device screen where you can change the description and assign its default device status.
Close. Choose this option to dismiss the menu.

NOTE:
Mobile app activation serves two purposes. The first is to transfer settings from Access Authenticator to the mobile device via the app (for example, the One-Time Password seed). The second is to tie the device to the user in Access Authenticator. The transfer of settings from Access Authenticator to the mobile device/app is done via QR code. The User Portal generates a QR code that contains all of the required information. The user uses the mobile app and the camera on their device to process the QR code. If for some reason the mobile device can’t process QR codes (broken camera, for example), a manual transfer method is available, whereby the user can manually copy information from the User Portal screen into the app (by typing the text from the screen).

Authentication Methods

This page lists the status of Access Authenticator's authentication methods (enabled or disabled) as defined by your administrator.

Download Desktop Agent

Click this link to download the Access Authenticator Desktop Agent. See Desktop Agent for more details.