Page tree


Page Contents


Related Content



Users


Account Connections

With the Account Connections feature in Exostar’s IAM Platform (formerly known as MAG), users can connect multiple accounts in order to leverage credentials of one account to access applications associated with another account. Once connections are complete, you can use the parent account’s credentials to complete login. 

Accounts are connected in a Parent-Child hierarchy. Child accounts may be connected to the parent account.

Account Connections Requirements

To connect a child account, your account must meet the following rules for eligibility:

  • First Name, Last Name, and Email Address must be the same in all accounts.
    • Child accounts cannot have any issued credentials (e.g. FIS Certificates, Third Party Credentials such as a CAC Card, NGC OneBadge, OTP Hardware Tokens, Phone OTP, Mobile ID, etc.) active on the account.
    • Child accounts cannot have US Person Attestation. 

NOTE: If you faxed Exostar a notarized US Person Attestation, please contact Exostar Customer Support to remove this attestation from the child account.

Connect Accounts

Step 1.  Go to https://portal.exostar.com to complete login.

Step 2.  Click the My Account tab, then Connect Accounts.

Step 3.  Under the Connect Accounts section, accounts eligible for connection display.

Step 4.  Click the account you want to connect.  You are required to enter the password for that account. Click Connect Account.

Step 5.  The account is successfully connected. You can log into your Exostar Identity and Access Management Platform (MAG) account with your parent account. 

NOTE: You are unable to login with your connected child account once the accounts are connected.

Disconnect Accounts

Step 1.  From the Connect Accounts sub-tab, locate the account you want to disconnect.

Step 2.  Click Disconnect. You receive a pop-up notification to verify you want to continue.  Click OK.

Step 3.  The account is disconnected. You can login using the disconnected child account. You can no longer leverage the credential connected to the parent account.


Modify User Profile

If you do not have multi-factor authentication credentials registered to your Exostar IAM Platform (MAG) account, you are able to modify details such as name, email and suffix.  You are unable to modify the following fields if you have registered or started the registration process for the credentials below or if using Account Connections.

Account Connections

If you are using Account Connections, you are unable to modify first name, last name and email address on child accounts. Please access Account Connections for assistance.

Enterprise Access Gateway (EAG)

If your Exostar IAM Platform (MAG) account is linked to your corporate credentials, locked fields vary based on data provided by your Remote Identity Provider.  You are unable to modify profile details that have been provisioned by the Remote Identity Provider.  To modify, you will need to delink your account.  However, updates may be overwritten by your corporate network if re-linking the account.  Please access EAG for assistance.

Exostar Mobile ID with or without Identity Proofing

  • First, Middle and Last Name
  • Suffix

To modify fields, you need to revoke Exostar Mobile.  Revoking will require a new purchase.  Please access OTP for assistance.

Federated Identity Service (FIS) Digital Certificate(s) BLOA or MLOA Software/Hardware

  • First, Middle and Last Name
  • Suffix
  • Email Address

To modify fields, you need to revoke your FIS Digital Certificate(s).  Revoking your certificate(s) will require a new purchase.  Please access FIS for assistance.

OTP Hardware Token with or without Identity Proofing

  • First, Middle and Last Name
  • Suffix

To modify fields, you need to revoke OTP Hardware Token.  Revoking will require a new purchase.  Please access OTP for assistance.

Phone OTP with or without Identity Proofing

  • First, Middle and Last Name
  • Suffix

To modify fields, you need to revoke Phone OTP.  Revoking will require a new purchase.  Please access OTP for assistance.

Third-Party Credentials (such as NASA PIV, DoD CAC, NGC OneBadge)

If your Exostar IAM Platform account is linked to third-party certificates, locked fields vary based on data provided by your certificate. To modify, you will need to delink your account.  However, updates may be overwritten by your corporate network if re-linking the account. Please access DoD CAC for assistance.


Request Application Access

Step 1.  From your Exostar IAM Platform (MAG) account Home dashboard view, review the application your organization is subscribed to.

Step 2.  Click Request Access next to the application you need access to. For ForumPass requests, enter sponsor code (provided by Sponsor or Administrator). You can enter comments viewable by Administrators who can approve your request.                 

Step 3.  Enter comments. We suggest you include the reason you need access in your comments. Comments and sponsor code fields are optional. 

Step 4.  Click Next. The request routes to the Application Administrator for authorization.  Access is approved or denied by the Application Administrator.  

NOTE: If the application requires Service Provider (SP) Administrator approval, the request routes to the SP Administrator for final approval after Application Administrator approval.


Request Application Access for a Suspended Application

Step 1.  From your IAM Platform (MAG) account Home dashboard view, locate the suspended application.                     

Step 2.  Click Reactivate Application

Step 3.  Enter comments. We suggest you include the reason you need access in your comments. Comments and sponsor code fields are optional.

Step 4.  Click Next. The request routes to the Application Administrator for authorization.  Access will be approved or denied by the Application Administrator.  

NOTE: If the application requires Service Provider (SP) Administrator approval, the request routes to the SP Administrator for final approval after Application Administrator approval.


Request FIS Digital Certificates

Step 1.  If you completed a FIS purchase, request access from your Home dashboard. Enter required Certificate Information for the certificate type you purchased: 

Partner/Application that requires the digital certificates.

  • Certificate Assurance Level: Basic (BLOA), Medium (MLOA), or Unknown.
  • Certificate Usage: Only displays if you select Basic.
  • Certificate Type: Software, Hardware, or Unknown.
  • Certificate Validity Period: 1 or 3 years. One year is only available for Basic.
  • Request Reason: Reason why you require certificates.

Step 2.  Review the User Information section. Ensure you use a business domain email address.  If requesting MLOA Certificates, ensure your first and last name match your proofing appointment identity documents. Click Next

Step 3.  The request routes to your organization’s FIS Administrator for approval. If a BLOA Certificate request is approved, you receive a 16-digit passcode via email. If MLOA Certificates are approved, the request routes to Exostar for purchase review and proofing dispatch. 


Update Email Address

If you need to change your email address, you must have access to the new email address to receive information to complete the process. If you have FIS Digital Certificates, you must revoke your certificates before you can change the email address. This may incur additional costs. If your account is linked to your corporate network account via EAG, you must delink your account to update the email address. Relinking of your EAG connection is required.

Step 1.  After logging in, click the My Account tab and click Change Email.

Step 2.  Enter new address. Click Continue then Submit.

Step 3.  You receive an activation code via email. Enter the code in the Activation Code field (dashes are required). Click Activate.

Step 4.  Your email address is updated.


Update Password and Security Questions

Step 1.  After logging in, click the My Account tab. Depending on the action you want to take, click Change Password or Change Security Questions.

Step 2.  To change password, enter old password and new password. Confirm password and click Submit.

Step 3.  Your password is successfully changed.

Step 4.  To change security questions, click the change box to enable edit-mode.

Step 5.  Select questions and enter answers. Click Submit.

Step 6.  Your security questions update.















How useful was this content?

Your Rating: Results: 1 Star2 Star3 Star4 Star5 Star 0 rates