Vendor Portal2.pdf

Multifactor Authentication

Multifactor Authentication

OVERVIEW

Multifactor Authentication (MFA) is an extra layer of security designed to help authenticate a user’s identity every time they log in to the Procurement Portal. It is required for ServiceNow systems to satisfy the Department’s Identification and Authentication control requirements.

MFA applications are free to use.

MFA does not require internet or cell tower connectivity to function.

Multiple platforms are currently available for users within ServiceNow, based on their MFA preferences and access to authentication devices.

Multifactor Authentication

USER SPECIFIC NEEDS

For users with a smart phone… Google Authenticator is a great MFA tool that is developed with a smartphone app that users can download directly to their personal devices. Each login attempt will notify users of an attempt which can be approved via an in app notification. Note, a smartphone is required for setup.

For users who do not have a smart phone… Authy is an alternative that offers setup that does not require a smartphone, and provides alternatives to an app verification method. Authy provides desktop methods and added security for shared public devices.

For users who do not have a phone… WinAuth provides users with a setup method to completely bypass setup with a phone. This method is simple and easy to use for users who will be using only a desktop device

Google Authenticator

Google Authenticator setup is performed with a smart device. The following instructions are for iOS, however, MFA with Google Authenticator is possible with Android and other mobile software.

Google Authenticator

SETUP

2JPS LWMG L12P MHAF

1 Download the Google Authenticator app to a smart device. Note that Google Authenticator is a free app that will not charge your account.

2 Log in to the Invoice Submission Portal using the username and password provided via email during account creation.

The Enable multi-factor authentication page will load.

It is recommended to set up MFA with a smart device like a smartphone or tablet that will be reliably available when logging into the Invoice Submission Portal.

Google Authenticator

SETUP

4 Tap BEGIN SETUP.

Tap Scan Barcode. The Google Authenticator app will activate the smart device’s camera.

SETUP

2JPS LWMG L12P MHAF

6 Hold the camera in front of the Enable multi-factor authentication page that is displayed on the computer.

7 Use the light green box projected on the smart device screen to center the QR code and scan it.

2JPS LWMG L12P MHAF

8 When the smart device recognizes the QR code displayed on the computer screen, the Google Authenticator app will automatically generate an authentication code.

SETUP

423278

9 Return to the Enable multi-factor authentication page on the computer.

Type the authentication code, without spaces, into the authentication code field.

10 Click Pair device and Login.

Note: This ends the one-time setup for Google Authenticator. For subsequent logins, only user verification is required.

MFA is required every time a user logs into the Invoice Submission Portal. Each account must only be accessed by the user registered to the account.

Google Authenticator

LOGGING IN

1 Log in to the Procurement Portal. The Procurement Portal will now display a 2-Factor Authentication page.

2 Open the Google Authenticator app.

LOGGING IN

4 On the Invoice Submission Portal 2-Factor Authentication page, type the authentication code (without spaces) in the authentication code field.

023248

5 Click Login.

Upon opening, the Google Authenticator app will automatically generate an authentication code under the heading “mygrants”.

Authy

Authy setup is performed with a smart device, Google Chrome Browser Extension, or a desktop app. The following instructions are for the Chrome Extension.

Authy

SETUP

1 Open Google Chrome and go to https://authy.com/download. Click the chrome icon.

2 Click Add To Chrome.

Click Add app in the pop-up window.

https://authy.com/download

SETUP

Click the Authy icon in Google Chrome.

Select a country code, enter a phone number and click OK.

Verify the users identity by selecting to receive a verification code through one of the listed methods.

Do not close the Authy window at this time.

SETUP

2JPS LWMG L12P MHAF

7 Log in to the Invoice Submission Portal using the username and password provided via email during account creation.

8 Copy the unique code on the Enable multi-factor authentication page. Return to the Authy Window.

9 Click the plus icon on to add an account.

SETUP

10 Paste the code from the Enable multi-factor authentication page into the Enter Code field and click Add Account.

Invoice Submission Portal MFA

11 Select a color icon, and enter “Invoice Submission Portal MFA” into the text box.

12 Click Done.

Note: This ends the one-time setup for Authy. For accessed by the user registered to the account.

Authy

LOGGING IN

1 Log in to the Procurement Portal. The Procurement Portal will

LOGGING IN

4 On the Procurement Portal 2-Factor Authentication page, type the authentication code (without spaces) in the authentication code field.

Upon opening, Authy will automatically generate an authentication code under the heading “Invoice Submission Portal MFA”.

023248

5 Click Login.

Invoice Submission Portal MFA

WinAuth

WinAuth setup is performed on a user's desktop.

WinAuth

SETUP

Download the WinAuth to your desktop by opening a browser and navigating to https://winauth.github.io/winauth/download.h tml. Click on the latest version of WinAuth to download it.

2 Click on the zip folder after it appears in the Downloads folder in.

Once the folder is opened, double click the WinAuth.exe file.3 https://winauth.github.io/winauth/download.html https://winauth.github.io/winauth/download.html

SETUP

Click the Add button in the WinAuth window.

5 Select Authenticator from the Add dropdown menu.

In the Name field, type “Invoice Submission Portal MFA”.

Invoice Submission Portal MFA

Do not close the WinAuth window at this time.

SETUP

2JPS LWMG L12P MHAF

7 Log in to the Invoice Submission Portal using the username and password provided via email during account creation.

8 On the Enable multi-factor authentication page, copy the unique code. Then return to the WinAuth window.

9 Paste the unique code from the Enable multi-factor authentication page into the Secret Code field. Be sure to select “Time-Based”.

10 Click Verify Authenticator.

Invoice Submission Portal MFA

SETUP

11 Copy the six-digit authentication code that generated.

Note, each code is only valid for 30 seconds.

12 Return to the Invoice Submission Portal multi-factor authentication page. Type the authentication code (no spaces) and click Pair device and Login.

Return to the WinAuth page and click OK.

Note: This ends the one time setup for WinAuth. For accessed by the user registered to the account.

WinAuth

LOGGING IN

1 Log in to the Procurement Portal. The Procurement Portal will

LOGGING IN

4 On the Invoice Submission Portal 2-Factor Authentication page, type the authentication code (without spaces) in the authentication code field.

Upon opening, WinAuth will automatically generate an authentication code under the heading “Invoice Submission Portal MFA”.

Invoice Submission Portal MFA

023248

5 Click Login.