Attachment 2 - Organizational Onboarding to Document Library.docx

Organizational Onboarding for Access to Document Library During the onboarding process, the outside organization requesting access to the document library will interface with Naval Nuclear Laboratory (NNL), the Naval Nuclear Propulsion Program (NNPP) prime contractor for research, development, and support of the Navy’s nuclear propulsion plants. An organization is considered to be ‘onboarded’ once the organization’s IT team has worked with NNL IT to make necessary connections between the PrimeNet Microsoft 365 ecosystem and their accounts.

In order to begin the onboarding process, the outside organization must provide the following information:

1. Organization Name – Name of the legal entity, e.g., Wayne Enterprises.

1. Email Domain – The back portion of their email addresses, e.g., @Wayne.net.

1. Internal Lead – Name of the IT contact, email, and phone number.

1. Shorthand – A brief, recognizable way to refer to the organization name. Each guest, when added to a SharePoint site, will display as First Name Last Name (Guest/Shorthand), like Sally Smith (Guest/Wayne). The shorthand name tells you who the person works for without creating an exceptionally long display name.

1. The maximum unclassified sensitivity the outside organization can process.

1. M365 cloud, if applicable (commercial, GCC, GCC High, DoD).

1. M365 tenant ID, if applicable.

1. IP address - The external organization must provide an external IP address, which is used to control access to PrimeNet's sensitive data. This ensures users cannot access U-NNPI/UCNI from non-approved systems and devices.

Once the required information is gathered, NNL IT will begin the onboarding process. More than likely, a meeting will need to be scheduled between the outside organization and NNL IT to discuss establishing a connection to PrimeNet. Organizational infrastructures are unique and these meetings are needed to ensure the best path forward is being taken.

Organizations should also keep in mind the following requirements regarding access to the PrimeNet document library:

1. Internet connection only from within the United States; vendor networks cannot be closed or airgapped from the outside internet.

2. Only corporate devices may be used to access the document library; personally owned devices are not permitted to access the system.

3. Multi-factor authentication (MFA) will be used to verify identities via Microsoft 365 (formally Office 365) and the Authenticator application.

4. Users must be able to access email on the same device that is used to access the document library; this supports verification and validation of individual users.

5. Supported browsers include Microsoft Edge or Google Chrome on Windows 10/11 or MacOS. Internet Explorer is not supported. Other browsers may work but full functionality has not been tested. Mobile devices – iOS or Android phones and tablets - are not supported.