Attachment 0006 TAV-C Portal User Access - End User SOP - v05.pdf

Logistics Modernization Program

Total Asset Visibility – Contractor (TAV-C)

Portal Access Standard Operating

Procedure for End Users (version 05)

Change: User access procedures have been updated; SOP separated by role; added detail regarding annual IA training requirements

LMP’s TAV-C capability extends asset visibility to contractor locations, contributes to bettering the Army’s view of assets, and supports Army Readiness.

March 2023

LMP TAV-C Portal End User Access Procedures

Table of Contents

Introduction

Purpose Statement

TAV-C Portal Access – ICAM Account Process Flow

General Process Information & Assumptions

Process Details – Performed by the End User (without a CAC)

Process Details – End User with CAC

TAV-C Portal User Role to Training Course Matrix

Terms & Acronym List

Appendix A – End User Instructions

Create an Identity Record in (AMID)

Multi-Factor Authentication

HELPFUL LINKS & RESOURCES

Introduction

Logistics Modernization Program’s (LMP) Total Asset Visibility – Contractor (TAV-C) capability was developed to resolve audit findings related to the management of Army property. TAV-C capability extends asset visibility into contractor locations through improved recordkeeping and provides more accurate reports associated with this Government property. Use of TAV-C functionality by contractors is mandatory for Army Working Capital Fund (AWCF) managed property in the possession of contractors. This solution contributes to the management of assets supporting global equipment Readiness through LMP.

Contractors using the TAV-C Portal to input information into LMP will comply with the access processes described in this guide to establish and maintain user accounts, complete access processes, as well as Department of Defense (DoD) approved authentication, to receive access to this capability. The approved authentication is achieved one of two ways: with a Common Access Card (CAC) or via the creation of an Identity, Credential, and Access Management (ICAM) account in conjunction with multi-factor authentication. The ICAM program is designed to provide the mechanism for external entities to securely communicate with the DoD and authenticate to DoD information systems.

It is recommended Contractors carefully review this document and consider the amount of time needed to establish and maintain user security credentials, complete mandatory systems access training, apply for access to the system, and complete task specific user training.

–– Until these requirements are satisfied, portal access will not be granted. ––

The Training to FSR Matrix provides a list of user functional training courses and refer to the solicitation to verify the TAV-C functions needed for the effort.

Purpose Statement

The purpose of this document is to provide an understanding of the process for gaining access to the LMP TAV-C Portal solution for TAV-C Portal Contractors. The TAV-C Portal Contractors include:

1) Stock, Store, and Issue Contractor Portal Users

2) Vendor Proof of Delivery Contractor Portal Users

Please note that the DoD ICAM process illustrated in this document provide instructions on how to request an account and register in through Army Mobile Connect on any device that allows the user to get to the app store for double authentication. (Cellular phone or tablet) etc. Apple Store, Google Store or TRADOC App Gateway.

Internet Access to the LMP TAV-C Portal has been validated using Windows 10 or later, Edge, and Google Chrome browsers. Hardware requirements for LMP TAV-C Portal would be any hardware that can support Windows 10, Edge, and Google Chrome and connect to the Internet.

TAV-C Portal Access – ICAM Account Process Flow

General Process Information & Assumptions

• In accordance with AMC Operations Order 19-229, dated 111810Z Sep 2019, this guide establishes procedures and guidance for users to gain access to the TAV-C Portal.

• The Contracting Officer (KO) works with the requiring activity to establish a Contract Officer’s Representative (COR) (preferrable) to appoint for contract users. If the contract has no COR, the requiring activity shall immediately appoint a DA Civilian to serve as sponsor. The COR/DA Civilian is referred to as the sponsor hereafter.

• The sponsor informs the TAV-C Portal contractor of these procedures and requirements and assists end users with gaining access to the TAV-C Portal.

The sponsor reviews and approves the establishment of LMP end user accounts supporting TAV-C Portal processes. The sponsor functions as the Contractor’s point of contact for LMP systems issues.

• The Sponsor works with the designated Command UAM Administrator to identify TAV-C Portal Functional Security Roles (FSRs) required by the contractor.

• Organizations will follow their documented policy for assigning FSR to Portal end users.

• The COR/Sponsor works with the designated Command UAM Administrator to identify the access required by the contractor.

• The Command UAM will manage the required annual account review, which is required for TAV-C Portal end users.

Process Details – Performed by the End User (without a CAC)

TAV-C Portal users who will not be using a CAC are required to have the following:

- Signed memorandum from the Company stating that the User is an employee of the company and confirm U.S. Citizenship status

- Identify, Credential, and Access Management (ICAM) account

- Identity record in Army Master Identity Directory (AMID)

- Multi-factor authentication (MFA)

The information in this section is for TAV-C users without a CAC. Proceed to the Process Details - Performed by the End User (with CAC) section for CAC-enabled user guidance. The End User will be contacted by the COR/Sponsor to begin the ICAM account creation process. The ICAM account process will result in the User having an account setup in AMID. This is a time-sensitive process. See Appendix A for step-by-step instructions. The End User process steps are as follows:

1. User receives an email application to create their account in AMID via the ICAM Portal.

2. User completes the application information and submits the application, then notifies the Sponsor.

3. User receives a confirmation e-mail that their application has been approved by the Sponsor.

4. User completes the ICAM account setup process, which includes setting a password and setting up security questions.

5. User verifies they can log into the ICAM Portal successfully with their username and password.

6. User sets up multi-factor authentication (MFA) and notifies the Sponsor that their account creation and MFA setup is complete.

7. Non-CAC Users will complete the following requirements:

a. Information Assurance/Cyber Awareness (IA/CA) Training for Non- CAC enabled users @ https://public.cyber.mil/ → Training → Cyber Awareness Challenge.

b. Mandated Army IT User Agreement → the non-CAC user will receive a blank copy of the IT User Agreement to complete and print their full name and sign (with blue or black ink).

c. Non-CAC holder will take the IA training and sign the Army IT User Agreement every year.

8. Once #7 is complete, the User sends the IA Training certificate and signed Army IT User Agreement to their Contracting Officer (KO), COR or Sponsor; these requirements must be completed before submitting any access requests.

a. The Army IT User Agreement will be re-signed annually, and the IA Training will be completed annually.

https://public.cyber.mil/

b. The Army IT User Agreement and IA Training will also be repeated if assigned to another contract. The current Army IT User Agreement is not allowed to roll-over to a new contract.

9. The COR/Sponsor and UAM will continue the process and grant the user the “TAV- C Universal Role” to allow the User access to the TAV-C Training Library via the TAV-C Portal

a. Users must complete appropriate TAV-C functional web-based training courses. See TAV-C Portal User Role to Training Course Matrix for further guidance.

b. User will send their TAV-C training certifications to their COR/Sponsor to be sent to the UAM for final LMP functional security role (FSR) access provisions.

10. Once LMP account is updated and FSRs are assigned, the User can begin using the TAV-C Portal with their ICAM Account Username, Password and MFA.

Process Details – End User with CAC

TAV-C Portal Users who will be getting a CAC, or who have a CAC, should work with their designated UAM for guidance on getting an LMP account. This is an existing process. A signed company memo is still recommended for TAV-C CAC users, if they will only be using LMP for TAV-C purposes.

For initial guidance, refer to the process flow and steps below.

The steps below are needed to complete a System Authorization Access Request (SAAR) to grant LMP access. This is for CAC users only. NOTE: The SAAR form is subject to change; this is based off the form as of May 2022.

• TAV-C Portal CAC end user completes blocks 1 through 16A of the of DD 2875 and submit to user UAM.

• Supervisor for CAC holders completes blocks 17-17e of the DD 2875 and submits to responsible Unit Security Manager.

• Unit Security Manager completes blocks 22-26 of DD 2875 & and return to requester.

• Site Information System Security Officer (ISSO) completes blocks 19 – 19c of DD 2875 and returns to the requester.

• Site UAMs receive the completed SAAR form and add it to the user’s LMP account once the account is created.

Please note that the following requirements will be completed annually:

1. Complete the Information Assurance/Cyber Awareness (IA/CA) Training @ https://cs.signal.army.mil/ → Click on the link to Cyber Awareness Training (CAC login required)

2. Digitally signed Army IT User Agreement @ https://cs.signal.army.mil/ → Click on the link to the Mandated Army IT User Agreement (CAC login required) https://cs.signal.army.mil/ https://cs.signal.army.mil/

TAV-C Portal User Role to Training Course Matrix

Terms & Acronym List

Acronym Name

ACC Army Contracting Command

AMC Army Materiel Command

AMID Army Master Identity Directory

CA Cyber Awareness

CAC Common Access Card

DoD Department of Defense

FSR Functional Security Roles

HQ Headquarters

IA Information Assurance

ICAM Identity, Credential, Access Management

SAAR System Authorization Access Request

SPONSOR Contracting Officer’s Representative or Government Sponsor

TAV-C Total Asset Visibility – Contractor

UAM User Account Manager

Appendix A – End User Instructions

Create an Identity Record in (AMID)

Once the Sponsor has successfully created your sponsored account, you will receive an e-mail to the e-mail address provided during account creation (personal or work e-mail). This will initiate the user’s application to create their identity record in Army Master Identity Directory (AMID).

1. Open the email invitation, then copy and paste the link provided in the email into your browser.

NOTE: Launching the link directly from the email may not work depending on your browser, email and security settings therefore it is recommended you copy and paste the link into the browser manually. If you still get an error using the link, try launching in private or incognito browsing mode.

IMPORTANT: This link expires in 24 hours from the time it was generated; if this link expires, the Sponsor will need to resend it. Therefore, the sponsor shall immediately contact the Invited User by phone or other means to inform them to take immediate action to create an identity account.

Army Master Identity Directory Email Example

Appendix A Cont’d

2. Complete the “Personal Information” fields on the “Enter/Update Account Information” page:

Field Entry Additional Guidance

Title (Optional) Enter a title or leave blank -

First Name (Required) Enter your first name -

Middle Name (Optional) Enter your middle name or leave blank

Last Name (Required) Enter your last name -

Maiden Name (Optional) Enter your maiden name or leave blank

Suffix (Optional) Enter a suffix or leave blank -

Country of Citizenship (Required)

USA -

3. In the “ID Fields” section, select the checkbox for Check if you do not have a FASCN and do not plan to login with a CAC (Optional). This will populate additional ID fields. Complete the fields:

NOTE: You must complete AT LEAST one of the ID fields to be able to submit the application.

Field Entry Additional Guidance

SSN (Optional) Enter your social security number (###-##-####)

- This is the ONLY valid entry for non- CAC TAV-C end users

- System will validate unique SSN entries and will not accept duplicates; must be in the correct format

FIN (Optional) Enter a foreign identification number (must be 9 or 10 digits)

- DO NOT USE: not applicable to LMP TAV-C users

- Duplicate entries are acceptable

EDIPI (Optional) Blank

- DO NOT USE: for CAC users only

- User should not have (or use) the EDIPI field

4. Complete the “Duty Address” and “Contact Info” fields:

Field Entry Additional Guidance

DSN (Optional) Blank -

Organization (Optional) Enter your company name or leave blank

Country (Required) USA -

Street Address (Required) Enter your work street address

City (Required) Enter your work city -

State/Province/Region (Required)

Enter your work state -

ZIP/Postal Code (Required) Enter your work zip/postal code

Official Email (Optional) Blank At least ONE email address is required; use the SECONDARY email field (it should match the email used during account creation)

Secondary Email (Optional) Enter your personal/work email

Primary Phone Number (Required)

Enter your phone number -

Cell Phone Number (Optional) Enter your cell or leave blank -

Fax Number (Optional) Enter a fax or leave blank -

5. Click SUBMIT APPLICATION.

6. You will receive a Thank You confirmation system message and a confirmation email. Notify the Sponsor that the application is complete so they can complete the application approval.

Multi-Factor Authentication

The use of multi-factor authentication is a requirement to access the TAV-C Portal without a CAC.

You will require a personal device with access to download apps from the Apple App Store or Google Play.

1. Go to the Welcome // ICAM Portal (army.mil) and click on MobileConnect.

2. Click Register.

3. On the EAMS-A Login Single Sign-On page, enter your account username and password and click Login.

4. The page will show My Status: Not Registered. Follow the instructions on this page:

https://icamportal.us.army.mil/welcome

a. Download the MobileConnect app on the Apple App Store or Google Play.

b. Launch the app and follow the app instructions to register.

c. Scan the unique QR code on this webpage to complete registration. If needed, you can Refresh code from this webpage to update the unique QR code.

5. That's it. Now just log in to EAMS-A with your username and password. Each time you log in, you will receive a notification on your device asking you to approve or deny the login attempt. Be sure to have your device with MobileConnect installed handy during login.

HELPFUL LINKS & RESOURCES

Helpful Links

• Welcome // ICAM Portal (army.mil)

• ICAM Portal FAQs (army.mil)

• MobileConnect (army.mil)

• Service Portal - Service Portal (army.mil)

ICAM / EAMS-A Documentation

1. Service Portal - Service Portal (army.mil)

2. Click on Knowledge

3. Enter any of the KBA numbers below into the SEARCH field

• KB0012454 - ICAM: Account Types & Sponsorship

• KB0012455 - ICAM: How to Initiate Sponsorship

• KB0012656 - ICAM: How to Transfer a Guest to Another Sponsor

• KB0012451 - How to Reset your Password

Help Desk

• Contact AESD at 1-866-335-ARMY (2769) - for EAMS-A, ICAM, MFA https://icamportal.us.army.mil/welcome https://icamportal.us.army.mil/faq/ICAM_PORTAL_FAQS.pdf https://mobileconnect.us.army.mil/ https://snpro.aesd-w.army.mil/sp/ https://snpro.aesd-w.army.mil/sp/