Before you can register for EAG you must complete the following steps:
1. Setup an account with our Exostar Sales team.
2. Your IT Department will work with Exostar to implement the integrated technology.
3. EAG technology allows users to connect their Company-issued Credentials to access partner applications behind Exostar’s Managed Access Gateway (MAG).
NOTE: Before users can start linking their Company-issued Credentials to their MAG account, EAG must be enabled at the Organization level.
Register for EAG
Self-Link your Account
2. Go to the My Account tab and click Edit Profile sub-tab.
3. If your organization is subscribed to EAG, you will see the Enterprise Access Gateway (EAG) Account Settings section (which allows you to link your account). Click Link Accounts.
4. A notification will display. To save profile changes, click OK. Then click OK again to start the account linking process.
5. Click Connect to Identity Provider.
6. If you have logged into your Corporate Network, click Link Account. If you have not, you are prompted to provide your Network Credentials. The displayed page is specific to your company. After entering Corporate Credentials, the Account Linking page displays. Click Link Account.
7. After clicking Link Account, your Corporate Network ID displays.
8. Click Logout and Close Browser to complete linking process.
9. The logout screen will display. Then close your browser window.
10. A persistent cookie is saved on your computer to identify you by your company (also called a Corporate Identity Provider). This cookie will ensure that you do not need to enter this information for subsequent logins to MAG.
NOTE: If you clear your browser history or use a different browser, you will need to select the Corporate Identity Provider for the Exostar MAG Platform once again.
Bulk Load EAG Subscriptions
Organization Administrators and Organization Stewards who want to add multiple users can subscribe users to the EAG service by entering the Remote Identity Provider (R-IDP) for the user in the ridpUserID field in the .CSV file. Once the upload completes, users will receive an email with instructions on how to access Managed Access Gateway (MAG).
NOTE: You must have an Organization Administrator or Organization Steward role to use the Bulk User Upload feature.
2. Access User Upload.
Scenario 1: Organization Administrators will need to go to the Administration tab and click the appropriate sub-tab (User Upload).
Scenario 2: Organization Stewards will need to go to the Stewardship tab, then click View Organizations to search for an organization. Click the hyperlinked Org ID to access organization details and then click Upload Users.
3. Fill out the .CSV template and ensure the ridpUserID field is completed. Do not enter information in the password field (this will cause an error when uploading the file). Save the completed template as “.CSV” file. (For instructions on how to use User Upload and to obtain the .CSV file, click the Online Help link).
NOTE: Application access requires approval by an Application Administrator. If an application requires additional approval, the request routes to the next participant in the approval workflow.
4. Once the upload completes, users receive an email with instructions about accessing the Exostar MAG Platform. Users will follow steps 5-7 to complete EAG connection.
5. Go to https://portal.exostar.com and click Enterprise Single Sign On (EAG), select your Corporate Identity Provider from the drop-down menu. Then click Login.
6. Depending on the Identity Provider you select, you are directed to a login page where you are required to enter your corporate credentials. If you are unable to login and need your corporate password reset, contact your IT department or Internal Helpdesk.
7. A persistent cookie is saved on your computer to identify you by your company (also called a Corporate Identity Provider). This cookie will ensure that you do not need to enter this information for subsequent logins to Exostar’s MAG.
NOTE: If you clear your browser history or use a different browser, you will need to select the Corporate Identity Provider for the Exostar MAG Platform once again. The next time you access your account using EAG, you are directed to enter your Corporate Credentials, which will log you directly into your account.
Link Account – JIT Provisioning
Just-In-Time (JIT) Provisioning allows users to be automatically provisioned in MAG. Users go through a one-time registration process and are required to subscribe an application. When account attributes change in the Enterprise, JIT based assertion allows user attributes to be updated in MAG when users federate to Exostar MAG services. Enterprises that have configured and subscribed to EAG (Remote Identity Provider service connection) in MAG can place a URL on their internal website. Employees can self-register for Exostar MAG connected application services.
2. Select Single Sign On (EAG) under Advanced Login Options.
3. Select your Remote Identity Provider (R-IDP) service connection.
4. Use your native (corporate) credentials to complete login.
5. The JIT User Registration page displays. Click Next.
6. Your Personal information will display on the next page.
7. Please note most fields are not editable. The information displaying in these fields is provided from your Corporate Identity Provider and not Exostar. Then click Next.
8. Select the Application(s) you will need to access. Click Next to complete. Application access will require approval by an Application Administrator. If an application requires additional approval, the request routes to the next administrator in the approval workflow.
9. A persistent cookie is saved on your computer to identify you by your company (also called a Corporate Identity Provider). This cookie will ensure that you do not need to enter this information for subsequent logins to MAG.
NOTE: If you clear your browser history or use a different browser, you will need to select the Corporate Identity Provider for the Exostar MAG Platform once again.