MAG Get Started

Welcome! If this is your first time accessing Exostar you will need to register for a Managed Access Gateway (MAG) account. MAG is a secure identity and access management cloud service for the Aerospace & Defense industries. A majority of our applications require a MAG account before you can access the secure applications behind it.
To begin registration, you will receive an email from Exostar inviting you to activate your account. Once you receive your email invitation, follow the steps below.

Life Sciences & Healthcare
Please note, not all of our applications require a MAG account, if you are a Life Sciences & Healthcare customer, click the hyperlink for a Secure Access Manager (SAM) account.



MAG Registration

Follows the steps and videos below to register and setup your MAG account for the first time.

Step 1. Register for MAG

You will receive an email invitation from your partner organization to complete account registration in MAG.

To Register a New MAG account:
1. Click the Accept Invitation button, located in the email invitation from the Exostar system.
2. Your browser displays a Get started with Exostar dialogue box. Click the Get Started button.
3. On the Complete the following information page, review the data for accuracy and input any missing fields. Select your Organization Headquarters Location from the country drop-down menu. Click Next.
A confirmation screen displays once your registration has been submitted. Once Exostar receives your registration request, it may take up to 24-48 hours for the approval process to complete. After the account is approved, you will receive an email to activate your account.
NOTE: Whoever completes the organization registration first, will automatically be assigned the Organization Administrator role. For more information on the different Administrator Roles and Responsibilities, please see the MAG Admin Resources page.

Step 1. Register for MAG


Step 2. Activate Account

Once Exostar approves your organization registration, you will receive an account activation email. Please review all information provided in the email, paying special attention to your Account Details and User ID

IMPORTANT: If you are the first person to register your organization and accept the invitation, you are automatically designated as the Organization Administrator for your company. For more information on your administrative responsibilities, please see the MAG Organization Administrator page.

Exostar offers a quarterly MAG Administration Webinar that provides information and instructions on administrative responsibilities. Please see the MAG Webinars page for available dates and registration information. 

In order for users in your company to access partner applications, the Organization Administrator or Application Administrator must first accept Terms & Conditions for each application. 

To Activate your Account:
1. Locate the Account Activation email. Click the Activate My Account button.
2. Review the Password Policy. Input and confirm your permanent Password. Click Next.
NOTE: Your Email Address or User ID and Password are used for all subsequent MAG logins.
3. Review the information on the screen concerning your security questions. Select and answer your Security Questions. Click Next to open the MAG Dashboard.

To Accept Terms & Conditions:
1. Under the My Applications section, you will see the applications your company is subscribed to, for each application you will need to click Agree to Terms.
2. Next review the terms and conditions, check the I have read and agree box to accept terms and conditions.
3. You will receive a confirmation message. Repeat the steps above for each application to which your company is subscribed.
4. Click Go to Dashboard, to begin using the application.

Step 2. Account Activation


Step 3. Purchase Credentials

Why might I need to Purchase Credentials?
Most applications behind MAG require a stronger security level than conventional username and password. Two-factor authentication (2FA) helps your partner ensure you are the only person who can access your account, even if someone knows your password. If your partner application requires 2FA and your credentials are not sponsored by your partner, you must purchase applicable credentials. Please note your partner might use the term Phone One-Time Password (OTP) instead of 2FA (OTP is a type of 2FA).

If you are doing business with multiple partner organizations and have a registered credential, you may not need to purchase additional credentials. The credential type depends on what the partner set for their application to accept. If you are unsure what credential to purchase, please contact Exostar Customer Support. EAG or third-party credential (CAC, PIV, NGC One Badge, Canada DND PKI Smart Card) users are not required to complete a purchase and can bind existing credentials to a MAG user account.

Pick your credential type below if you are ready to activate your 2FA credential:

To Purchase Credentials:
For the scenario below we will use the Phone One-Time Password without Proofing credential:
1. Login to your MAG account your Email Address or User ID and Password.
2. Click the Get 2FA button from the My 2FA Credentials section on the MAG Dashboard.
3. Select from the Partner drop-down menu to display a list of acceptable credentials.
4. Select the radio button for the Phone One Time Password (OTP) (Without Proofing) (1 Year) option. Click Next.
5. Review and input any missing information in the Primary Information, Billing Address, and Shipping Address sections. Click Next.
6. Select your Payment Method (credit or invoice). Input payment details, if paying by credit. Click Submit.
NOTE: If you pay by invoice, you must make full payment prior to receiving the hardware token.
A confirmation screen displays and you receive a confirmation email, containing the license key required for the activation process. You can activate directly from the confirmation screen, or later via your MAG user account and the My 2FA Credentials section.

Step 3. Purchase/Activate Credentials

Get Two-Factor Authentication (2FA)


Step 4. Access Applications

To Access Applications:
1. Login to your MAG user account with Email Address or User ID and Password.
2. Locate the desired application tile, located in the My Applications section of the MAG Dashboard. Click Launch.
3. Select the phone number to which you want use to receive the OTP code. Choose the delivery method. Click Send to have the code sent to your phone.
4. You will receive the OTP code on your phone. Enter the code in the OTP code field. Click Next to open the application.
NOTE: Once you receive the code, it will be valid for the next two minutes. If the code expires, click Resend verification code.

Connect Accounts

After you complete the MAG Account Setup Process, you can connect your accounts if you have multiple logins. To learn how to link your accounts in MAG, view the Link Accounts page.

What Accounts are eligible to Connect?
If you have several MAG accounts, you can connect them using the Account Connections feature available in MAG. Accounts are connected in a “parent-child” hierarchy, and the child account must meet all of the below criteria to become eligible for connection:
– First Name, Last Name, and Email Address must be the same in all accounts.
– Child accounts cannot have any active credentials attached to them. 
– Child accounts cannot have the notarized US Person Attestation attached to it. Please contact Exostar Customer Support to remove this attestation from the account.


After your accounts are connected, you will be able to use credentials attached to the parent account to access the applications associated with the child account.
How do I Connect Accounts?
1. Login to your parent MAG Account – https://portal.exostar.com.
2. Select the My Account tab, then select Connect Accounts sub-tab.
3. Under the Connect Accounts section, accounts eligible for connection display.
4. Select the child account you want to connect, and enter the password for that account. Then click Connect Account.
5. The child account is now successfully connected to the parent account. 
NOTE: After your accounts are connected, you are able to log into your parent account only. 
How do I Disconnect Accounts?
1. Login to your parent MAG Account – https://portal.exostar.com.
2. Select the My Account tab, then select Connect Accounts sub-tab. 
3. Under the Connect Accounts section, locate the child account you want to disconnect. 
4. Click Disconnect. You will receive a pop-up notification to verify you want to continue.  Click OK.
5. The child and parent accounts are now disconnected. 
You will be able to login to both accounts separately, but you won’t be able to use the credential of your parent account to access applications in your child account.

Next Steps

Learn more about the MAG Platform and choose one of the options below:

Updated on April 2, 2024

Was this article helpful?

Related Articles