Registration FAQs
What is Exostar’s Managed Access Gateway (MAG)?
Exostar’s Managed Access Gateway (MAG) is a secure Identity and Access Management solution for highly-regulated industries, including Aerospace & Defense. With the cloud-based solution, organizations enjoy benefits including account management, web-based single sign-on, and a single place to access applications shared with buyers and partners.
Why does my Organization have to Register for MAG?
Your organization needs to register for a MAG account in order to access partner applications behind MAG. Once your company is registered, additional users require their own accounts.
How does my Organization Register for a MAG account?
Your Partner company must invite your organization to complete a registration for a MAG account via email. Reach out to your Partner to get invited. Once you receive your email invitation follow the steps below:
1. From the MAG Account Activation Email, click the Accept Invitation button.
2. You are redirected to a new page, click Get Started to begin the registration process.
3. Complete the registration form and fill out all your information. Verify all information is correct before clicking Next.
4. You will receive a registration confirmation and email with your account details and role information.
NOTE: Whoever submits the registration form is automatically designated as the Organization Administrator.
Please Note: You can register for Certification Assistant and Exostar’s Federated Identity Service (FIS) without receiving an invitation from a partner company. Self-Register here.
1. From the MAG Account Activation Email, click the Accept Invitation button.
2. You are redirected to a new page, click Get Started to begin the registration process.
3. Complete the registration form and fill out all your information. Verify all information is correct before clicking Next.
4. You will receive a registration confirmation and email with your account details and role information.
NOTE: Whoever submits the registration form is automatically designated as the Organization Administrator.
Please Note: You can register for Certification Assistant and Exostar’s Federated Identity Service (FIS) without receiving an invitation from a partner company. Self-Register here.
How does an Individual User Register for a MAG Account?
Users can complete self-registration for MAG by clicking the Self-Register link.
Organization or Adoption Administrators can also create user accounts. Users will receive an account activation email to setup their account.
Organization or Adoption Administrators can also create user accounts. Users will receive an account activation email to setup their account.
Already have MAG account – how do I access additional Partner (buyer) applications?
To access additional Partner applications, the Partner company must invite you to their application first.
Please note, your MAG Organization Administrator can register for Boeing Supply Chain Platform (BSCP), SourcePass, and Exostar’s Federated Identity Service (FIS) via their MAG account. Additionally, you can register for Boeing 787 Supply Chain Platform. Although these applications are available for public registration, you should work with your Partner company (buyer) contact to confirm if registration should be completed.
Please note, your MAG Organization Administrator can register for Boeing Supply Chain Platform (BSCP), SourcePass, and Exostar’s Federated Identity Service (FIS) via their MAG account. Additionally, you can register for Boeing 787 Supply Chain Platform. Although these applications are available for public registration, you should work with your Partner company (buyer) contact to confirm if registration should be completed.
I completed Account Activation, but need to return to the Credentialing Process. How do I return to account setup?
To log back into MAG, by accessing the registration link in the Login Success email or click here: https://ui.portal.exostar.com/iamui/mfa/userReference. Then login with your User ID/Email and Password to complete the process.
Login FAQs
How do I Activate and Setup my MAG Account?
1. After you register with Exostar, you will receive an email with your account information and role, click the Activate my Account button to get started.
2. Follow the prompts to create your password. Click Next.
3. Setup your security questions, provide the answers, and click Next.
You are redirected to the MAG Dashboard, where you can manage your application access.
2. Follow the prompts to create your password. Click Next.
3. Setup your security questions, provide the answers, and click Next.
You are redirected to the MAG Dashboard, where you can manage your application access.
I accidentally exited during the Account Activation process. How do I get back to it?
If you exit out of the account registration process at any time, you can log back in by accessing the registration link in the Login Success email or click the link:
https://ui.portal.exostar.com/iamui/mfa/userReference. Then login with your User ID/Email and Password.
https://ui.portal.exostar.com/iamui/mfa/userReference. Then login with your User ID/Email and Password.
How do I Login to my MAG account after account activation?
1. Go to https://portal.exostar.com. (You can favorite/bookmark this link to easily access it for future logins).
2. In the login window, enter User ID/Email. Click Next.
3. Enter Password. Click Next.
2. In the login window, enter User ID/Email. Click Next.
3. Enter Password. Click Next.
I received an Error Message during login. What should I do?
You may receive an error message during login if you have multiple MAG user accounts, and your browser has cached your information. Follow these steps to login:
1. Click on your name (Profile Menu) in the top right corner, and verify the account you are logged in with matches the account listed.
2. If a different user account displays other than the one you are logged in with, clear your browser’s history (cache and cookies).
3. Return to the login process.
1. Click on your name (Profile Menu) in the top right corner, and verify the account you are logged in with matches the account listed.
2. If a different user account displays other than the one you are logged in with, clear your browser’s history (cache and cookies).
3. Return to the login process.
Password FAQs
How do I Reset my Password?
1. Go to https://portal.exostar.com. Click Forgot Password? link.
2. You are redirected to the Account Recovery page. Select the method to reset your password. Click Next.
3. Follow the prompts to reset your password.
NOTE: If you have multiple accounts associated with your email address, please contact Exostar Customer Support for assistance.
2. You are redirected to the Account Recovery page. Select the method to reset your password. Click Next.
3. Follow the prompts to reset your password.
NOTE: If you have multiple accounts associated with your email address, please contact Exostar Customer Support for assistance.
How do I Change my Security Questions and Answers?
1. Login with your Email or User ID and Password.
2. From the MAG Dashboard, click the My Account tab and select Change Security Questions.
3. Update your security questions and answers.
4. Click Submit.
2. From the MAG Dashboard, click the My Account tab and select Change Security Questions.
3. Update your security questions and answers.
4. Click Submit.
How do I Change my Password?
1. Log into MAG and select the My Account tab. Click the Change Password sub-tab.
2. To change your password, enter the old password and new password. Re-enter your new password again. Click Submit.
Your password is now successfully changed.
2. To change your password, enter the old password and new password. Re-enter your new password again. Click Submit.
Your password is now successfully changed.
Who do I Contact for Additional Assistance?
If you need help, please contact your Organization Administrator or Exostar Customer Support for further assistance.
Profile FAQs
How do I Update my Profile?
1. Log into your MAG account.
2. Navigate to the My Account tab, and click the Edit Profile sub-tab to update the information in your account.
NOTE: Contact Exostar Customer Support for further assistance if you do not have permission to modify specific desired fields in your user profile.
2. Navigate to the My Account tab, and click the Edit Profile sub-tab to update the information in your account.
NOTE: Contact Exostar Customer Support for further assistance if you do not have permission to modify specific desired fields in your user profile.
How do I Update my Email Address?
You can update your email address only if your MAG account does not have an active credential attached to it. If this is the case, make sure you have access to the new email address (to receive the activation code), and follow the steps below to update your email address:
1. After logging in, click the My Account tab and click Change Email.
2. Enter the new email address. Click Continue and Submit.
3. You receive an activation code via email. Enter the code in the Activation Code field (dashes are required), and click Activate to complete the update.
1. After logging in, click the My Account tab and click Change Email.
2. Enter the new email address. Click Continue and Submit.
3. You receive an activation code via email. Enter the code in the Activation Code field (dashes are required), and click Activate to complete the update.
Update Email Address – OTP and FIS Credential Users:
If you have an active credential (an OTP or FIS, for example), the update email action will not available to you. Please contact Exostar Customer Support, and we will guide you through the process of email update.
Update Email Address – EAG and 3rd Party Certificate Users:
– EAG users: If your account is linked to your corporate network account via EAG, you must de-link your account to update the email address. After updating the email, re-link your EAG connection.
– Third-Party Certificate Users: NGC One Badge, DoD, Canada DND PKI Smart Card, and NASA PIV card holders will be able to modify email address.
– Third-Party Certificate Users: NGC One Badge, DoD, Canada DND PKI Smart Card, and NASA PIV card holders will be able to modify email address.
Profile Fields Not Editable
Why Can’t I Edit Certain Fields in my Profile (first, last name, and email address)? What Should I do?
If you do not have multi-factor authentication credentials registered to your MAG account, you are able to modify your first, middle and last name name, and email address. However, if you have credentials attached to your account, started the registration process for a new credential, or use Account Connections, certain fields in your profile are not editable.
Please see the different scenarios below and follow the steps for your specific situation:
Account Connections
If you connect several MAG accounts, you are unable to modify first name, last name and email address on your child account. Additionally, account information cannot be modified if you have a pending identity proofing appointment for a security credential. If you have a pending appointment and need to modify connected accounts, please cancel the pending request to edit your profile. Reschedule the proofing appointment once corrections are complete.
Enterprise Access Gateway (EAG)
If your MAG account is linked to your corporate credentials, locked fields vary based on data provided by your Remote Identity Provider (RIDP). To modify, you will need to de-link your account. However, updates may be overwritten by your corporate network if re-linking the account. Please access EAG for assistance.
Exostar Mobile ID With or Without Identity Proofing
You must revoke Exostar Mobile ID to be able to modify first, middle, and last name. Revoking requires a new purchase. Please access OTP for assistance.
Federated Identity Service (FIS) Digital Certificate(s) (BLOA or MLOA, Software/Hardware)
You must revoke your FIS Digital Certificate(s) to be able to modify first, middle and last name, and email address. Revoking your certificate(s) requires a new purchase. Please access FIS for assistance.
OTP Hardware Token With or Without Identity Proofing
You must revoke OTP Hardware Token to be able to modify first, middle, and last name. Revoking requires a new purchase. Please see OTP Hardware Token page for additional assistance.
Phone OTP With or Without Identity Proofing
You must revoke Phone OTP to be able to modify first, middle, and last name. Revoking requires a new purchase. Please view the Phone OTP page for additional assistance.
Third-Party Credentials (such as NASA PIV, DoD CAC, NGC OneBadge)
If your MAG account is linked to third-party certificates, locked fields vary based on data provided by your certificate. To modify, you will need to de-link your account. However, updates may be overwritten by your corporate network if re-linking the account. DoD CAC users can modify their email address. Please see DoD CAC for additional assistance.
Change Authorization Form
How do I initiate important changes to my profile (org name/address, Org Admin, etc.)?
Any of the below updates to your own or company’s profile require you to contact Exostar and request the Change Authorization Form:
– Organization Administrator Change: When the listed MAG Org Admin is no longer available.
– Email Address Change: When a user has not completed first time login or email domain name has changed, and the user cannot access the account.
– Company Address Change: When the company’s address changed. A change form is required only when changing the address for the organization (not at the user level).
– Company Name Change: When the company’s name changed.
– Legal Name Changes: When a user has to change your legal name.
– Organization Administrator Change: When the listed MAG Org Admin is no longer available.
– Email Address Change: When a user has not completed first time login or email domain name has changed, and the user cannot access the account.
– Company Address Change: When the company’s address changed. A change form is required only when changing the address for the organization (not at the user level).
– Company Name Change: When the company’s name changed.
– Legal Name Changes: When a user has to change your legal name.
How can I Obtain the Change Authorization Form?
1. Contact Exostar Customer Support to report change, and request a DocuSign Change Authorization Form.
2. The form is sent via email, along with a case number to track the request.
3. Click View Documents in the received email. A pop-up displays with the DocuSign Change Request agreement. Check the box for I agree to do business electronically with Exostar LLC.
4. Review and complete the form. Include the MAG Organization Name, Exostar ID and Organization ID. To locate your company’s organization details, navigate to the My Account tab in MAG, and click View Organization Details.
2. The form is sent via email, along with a case number to track the request.
3. Click View Documents in the received email. A pop-up displays with the DocuSign Change Request agreement. Check the box for I agree to do business electronically with Exostar LLC.
4. Review and complete the form. Include the MAG Organization Name, Exostar ID and Organization ID. To locate your company’s organization details, navigate to the My Account tab in MAG, and click View Organization Details.
What are the Steps for Completing the Form?
1. Ensure the information is entered in the correct order when completing the form.
2. Complete the fields in the section relevant to your request. You can request multiple changes on a single form.
– If requesting an Organization Administrator change and you have an existing MAG account, ensure you include your Existing User ID in the User ID field. Failure to do so may result in creation of a new account.
– If an existing Organization Administrator is still active and you are requesting an Organization Administrator change, complete the form and include a letter on company letterhead. The letter must include a statement about the replacement request for the current Administrator, who the new Administrator is, and the non-compliant account will no longer be accessed. The existing Administrator accounts are deleted.
– If requesting a legal name change, complete the form and include a letter on company letterhead. The letter needs to include the change reason and who the request is for.
3. Complete the Authorization/Change Requestor section at the bottom of the form. Click Sign Here and complete document signing.
4. Click Finish. The request routes to Exostar, and is tracked via the case number.
NOTE: The form expires within three days of receipt. If you need assistance with form completion, contact Exostar Customer Support.
2. Complete the fields in the section relevant to your request. You can request multiple changes on a single form.
– If requesting an Organization Administrator change and you have an existing MAG account, ensure you include your Existing User ID in the User ID field. Failure to do so may result in creation of a new account.
– If an existing Organization Administrator is still active and you are requesting an Organization Administrator change, complete the form and include a letter on company letterhead. The letter must include a statement about the replacement request for the current Administrator, who the new Administrator is, and the non-compliant account will no longer be accessed. The existing Administrator accounts are deleted.
– If requesting a legal name change, complete the form and include a letter on company letterhead. The letter needs to include the change reason and who the request is for.
3. Complete the Authorization/Change Requestor section at the bottom of the form. Click Sign Here and complete document signing.
4. Click Finish. The request routes to Exostar, and is tracked via the case number.
NOTE: The form expires within three days of receipt. If you need assistance with form completion, contact Exostar Customer Support.
Credential FAQs
What Types of Credentials does Exostar offer?
– Standard User ID/Email and Password
– One-Time Password (OTP) Hardware Token with or without identity proofing
– Phone One-Time Password (OTP) with or without identity proofing
– Exostar Mobile ID Bundle (powered by Authy™), includes Phone OTP and Exostar Mobile ID with or without identity proofing
– Federated Identity Service (FIS) Digital Certificates: Basic Level of Assurance (BLOA), BLOA Secure Email, Medium Level of Assurance (MLOA) Software & Hardware.
– Exostar’s Enterprise Access Gateway (EAG) solution
– One-Time Password (OTP) Hardware Token with or without identity proofing
– Phone One-Time Password (OTP) with or without identity proofing
– Exostar Mobile ID Bundle (powered by Authy™), includes Phone OTP and Exostar Mobile ID with or without identity proofing
– Federated Identity Service (FIS) Digital Certificates: Basic Level of Assurance (BLOA), BLOA Secure Email, Medium Level of Assurance (MLOA) Software & Hardware.
– Exostar’s Enterprise Access Gateway (EAG) solution
How do I Purchase Credentials?
1. Login to your MAG account and click the Get 2FA button on your dashboard/home page.
2. You are redirected to Exostar’s web store. From the Purchase your Exostar Subscription page, select the desired credentials.
3. Follow the prompts to complete your purchase.
2. You are redirected to Exostar’s web store. From the Purchase your Exostar Subscription page, select the desired credentials.
3. Follow the prompts to complete your purchase.
Can Credentials be Shared?
No, user accounts and activated credentials cannot be shared and is against Exostar’s policy. OTP Hardware Tokens, Phone OTP, and Exostar Mobile ID subscriptions that have not been activated can be transferred.
Why can’t I access my Application even though I Purchased & Activated my Credentials?
Either you purchased an incorrect credential or have not logged in with your activated credential yet. If you purchased an incorrect credential, you are required to purchase the correct credential. To confirm the credential you logged in with, follow the steps below:
1. From the MAG Dashboard, click Launch from the application card or you may click Elevate Credential Strength (green button) from the My 2FA Credentials section.
2. You are redirected to the Two-Step Verification page, that displays a list of 2FA Credentials associated with your account.
3. Select one of the methods and proceed with the authentication process.
4. After you return to the MAG Dashboard, your credential strength displays and you should be able to open the application.
1. From the MAG Dashboard, click Launch from the application card or you may click Elevate Credential Strength (green button) from the My 2FA Credentials section.
2. You are redirected to the Two-Step Verification page, that displays a list of 2FA Credentials associated with your account.
3. Select one of the methods and proceed with the authentication process.
4. After you return to the MAG Dashboard, your credential strength displays and you should be able to open the application.
Why is my OTP Credential still Suspended even though I Purchased a Renewal?
Please note it can take up to 24 hours for the renewal to process. If it has exceeded 24 hours, please contact Exostar Customer Support.
Can I receive a Refund for my Credential Purchase?
eTools purchases, activated credentials, expired license keys for products or used renewals are ineligible for refund. For questions about refunds, please contact Exostar Customer Support.
Credentials by Partner / Application
The credential type is dependent upon the security requirements for the application you are accessing. Please review the table below, and if you cannot find the information or need additional assistance, please contact Exostar Customer Support or the representative of your partner organization. Please see the MAG Credentials page for exact partner/application required credentials.
Additional Resources
Please review the following pages to learn more about One-Time Password and Federated Identity Service (FIS).