IMPORTANT UPDATE
Please be informed that starting June 1st, 2025, MAG will be enforcing the acceptance of Exostar Terms and Conditions at least once every 5 years.
Starting June 1st, 2025, your Organization Administrators will be required to accept the Exostar Terms and Conditions within 30 days in order to access MAG.
If the Exostar Terms and Conditions are not accepted before the 30 days lapses, then your Organization and users will not be able to access MAG and other applications, and access will remain blocked until your Org Admin accepts the Terms and Conditions.
If your MAG organization is missing an Org Admin, please reach out to Exostar Customer Support to have an Admin created. Please indicate in the subject field that you do not have an active Org Admin in your organization when you reach out. If you need to change or add a new Org Admin, please view the Change Authorization page.
This page reviews MAG Organization Administrator role and common tasks they can perform. To view the MAG Organization Administrator guide, click here. Please visit the MAG Webinars page for MAG Organization and Application Administrator live training dates.
IMPORTANT! If your Organization Administrator is no longer available, and an admin change is required, you must reach out to Exostar’s Customer Support for a Change Authorization Form. Please see the Change Administrator section below for additional information and instructions.
Responsibilities
Organization Administrators can perform the following common tasks in Managed Access Gateway (MAG):
Manage Application Access
Users within your organization can only access applications AFTER you accept terms and conditions.
To accept Terms and Conditions:
1. From your MAG Dashboard, locate the desired application and click the Agree to Terms button.
2. Click Continue to view the Terms and Conditions.
3. Review the Terms and Conditions. Check the box for I have read and agree to these terms and conditions. Click Next.
NOTE: Once you receive the confirmation message, users within your organization can request access to the application.
2. Click Continue to view the Terms and Conditions.
3. Review the Terms and Conditions. Check the box for I have read and agree to these terms and conditions. Click Next.
NOTE: Once you receive the confirmation message, users within your organization can request access to the application.
To request access to applications for users:
1. From your MAG Dashboard, navigate to the Administration tab.
2. Select the View Users sub-tab and search for the user.
3. Click the hyperlinked User ID to open the user’s profile.
4. Scroll to the Application Settings section, click Activate next to the desired application.
The request routes to the Application Administrator for authorization.
2. Select the View Users sub-tab and search for the user.
3. Click the hyperlinked User ID to open the user’s profile.
4. Scroll to the Application Settings section, click Activate next to the desired application.
The request routes to the Application Administrator for authorization.
To suspend or unsuspend access to applications for users:
1. From your MAG Dashboard, navigate to the Administration tab.
2. Select the View Users tab, then search for the user, next select the User ID hyperlink to open the user’s profile.
3. Scroll to the Application Settings, click Suspend button next to the desired application. To unsuspend, click Activate.
NOTE: If you are suspending the account, you must enter a suspension reason in the pop-up window. Click Suspend.
2. Select the View Users tab, then search for the user, next select the User ID hyperlink to open the user’s profile.
3. Scroll to the Application Settings, click Suspend button next to the desired application. To unsuspend, click Activate.
NOTE: If you are suspending the account, you must enter a suspension reason in the pop-up window. Click Suspend.
To subscribe your organization to FIS:
1. From your MAG Dashboard, select the Administration tab, and then select Subscribe to Application sub-tab.
2. Locate FIS application. Click the Subscribe to Application button.
3. Select an existing or add a new FIS Administrator. Click Next.
NOTE: If creating a new Application Administrator, the system creates a new user account. The request is then routed to Exostar for approval (it may take up to 48 hours to process). You receive a notification once Exostar approves your request.
4. Once Exostar approves your request, login to your Exostar MAG account and accept the FIS Terms and Conditions.
NOTE: Any users associated with your organization requiring FIS access, must request FIS access after you accept Terms and Conditions.
2. Locate FIS application. Click the Subscribe to Application button.
3. Select an existing or add a new FIS Administrator. Click Next.
NOTE: If creating a new Application Administrator, the system creates a new user account. The request is then routed to Exostar for approval (it may take up to 48 hours to process). You receive a notification once Exostar approves your request.
4. Once Exostar approves your request, login to your Exostar MAG account and accept the FIS Terms and Conditions.
NOTE: Any users associated with your organization requiring FIS access, must request FIS access after you accept Terms and Conditions.
To upgrade to FIS MLOA:
If you need to upgrade your company from FIS Basic Level of Assurance (BLOA) to FIS Medium Level of Assurance (MLOA):
1. From your MAG Dashboard click the Administration tab, then select the Subscribe to Application sub-tab.
2. Click Subscribe to Application for FIS.
3. Under the Organization Assurance Information section, select Medium. Click Next.
NOTE: The request is routed to Exostar for approval or denial. You receive a notification once Exostar actions your request.
4. Once Exostar approves your request, login to your MAG account to accept Terms and Conditions.
NOTE: Any users associated with your organization requiring FIS access must request FIS access after you accept Terms and Conditions. MLOA requires in-person proofing.
1. From your MAG Dashboard click the Administration tab, then select the Subscribe to Application sub-tab.
2. Click Subscribe to Application for FIS.
3. Under the Organization Assurance Information section, select Medium. Click Next.
NOTE: The request is routed to Exostar for approval or denial. You receive a notification once Exostar actions your request.
4. Once Exostar approves your request, login to your MAG account to accept Terms and Conditions.
NOTE: Any users associated with your organization requiring FIS access must request FIS access after you accept Terms and Conditions. MLOA requires in-person proofing.
Reset Passwords
To reset a user’s password:
1. From your MAG Dashboard, click the Administration tab.
2. Select View Users tab.
3. Complete a search for the user. Select the hyperlinked User ID to open the user’s profile.
4. Scroll to the Application Settings section. Click Reset Permanent Password.
NOTE: The user receives an email with a system-generated password.
2. Select View Users tab.
3. Complete a search for the user. Select the hyperlinked User ID to open the user’s profile.
4. Scroll to the Application Settings section. Click Reset Permanent Password.
NOTE: The user receives an email with a system-generated password.
Manage Users
To add user’s individually:
1. Login to your MAG account. From the dashboard, select the Administration tab.
2. Select Add New User.
3. Enter the user’s information, select their role, and application access. Click Continue.
NOTE: Please ensure you are using the user’s legal name. This is especially important for credentialing purposes.
4. Review data input. Click Submit.
NOTE: You receive a confirmation email once the account is created. The user also receives an email to activate their account. Additionally, restricted access is applicable for the ForumPass application only. Only select On if the user requires a restricted profile within ForumPass.
2. Select Add New User.
3. Enter the user’s information, select their role, and application access. Click Continue.
NOTE: Please ensure you are using the user’s legal name. This is especially important for credentialing purposes.
4. Review data input. Click Submit.
NOTE: You receive a confirmation email once the account is created. The user also receives an email to activate their account. Additionally, restricted access is applicable for the ForumPass application only. Only select On if the user requires a restricted profile within ForumPass.
To invite users to self-register:
You can add users to your organization’s MAG application by inviting them to self-register, and then approve their registration from your MAG account.
1. Send the user the self-registration URL: https://portal.exostar.com/userRegistration and the Exostar Organization ID.
2. To find your Organization ID, go to My Account, select Edit Profile. View the Organization ID from the User Profile section.
Once the user accepts the invitation, the request is routed to anyone with the Organization Administrator role within your company for approval.
1. Send the user the self-registration URL: https://portal.exostar.com/userRegistration and the Exostar Organization ID.
2. To find your Organization ID, go to My Account, select Edit Profile. View the Organization ID from the User Profile section.
Once the user accepts the invitation, the request is routed to anyone with the Organization Administrator role within your company for approval.
To approve or deny self-registrations:
1. From your MAG Dashboard, select the Registration Requests tab.
2. Click Authorize User.
3. Click the hyperlinked User ID in the Request ID field.
4. View the request, and modify personal information if necessary. Click Next.
5. Answer the questions by selecting responses from the drop-down menus. If approving, select YES for both questions.
6. Select an action (Approve or Deny). Click Next to complete.
NOTE: If the status is Pending, you are unable to action the request. Scroll over the request ID to determine who locked the request. To unlock the request, contact the individual whose name displays.
2. Click Authorize User.
3. Click the hyperlinked User ID in the Request ID field.
4. View the request, and modify personal information if necessary. Click Next.
5. Answer the questions by selecting responses from the drop-down menus. If approving, select YES for both questions.
6. Select an action (Approve or Deny). Click Next to complete.
NOTE: If the status is Pending, you are unable to action the request. Scroll over the request ID to determine who locked the request. To unlock the request, contact the individual whose name displays.
To delete a user:
1. From your MAG Dashboard, select the Administration tab.
2. Click the View Users tab, search for the user, and click the User ID hyperlink to open the user’s profile.
3. Scroll to the Application Settings section. Click Delete, to remove the user.
NOTE: If the user has FIS Certificates or a One Time Password (OTP) Hardware token associated with their account, you must revoke the credential prior to deleting the user. Please be advised, revocation of a credential and/or user deletion is an irreversible, permanent action. A new purchase is required once revocation is complete.
2. Click the View Users tab, search for the user, and click the User ID hyperlink to open the user’s profile.
3. Scroll to the Application Settings section. Click Delete, to remove the user.
NOTE: If the user has FIS Certificates or a One Time Password (OTP) Hardware token associated with their account, you must revoke the credential prior to deleting the user. Please be advised, revocation of a credential and/or user deletion is an irreversible, permanent action. A new purchase is required once revocation is complete.
To suspend a user:
1. From your MAG Dashboard, select the Administration tab.
2. Select View Users tab, search for the user, and click the User ID hyperlink to open the user’s profile.
3. Scroll to the Application Settings section. Click Suspend.
4. If suspending, you must enter a suspension reason from the drop-down menu. Click Suspend.
2. Select View Users tab, search for the user, and click the User ID hyperlink to open the user’s profile.
3. Scroll to the Application Settings section. Click Suspend.
4. If suspending, you must enter a suspension reason from the drop-down menu. Click Suspend.
To reactivate a suspended user:
1. From your MAG Dashboard, select the Administration tab.
2. Select View Users tab, search for the user, and click the User ID hyperlink to open the user’s profile.
3. Scroll to the Application Settings section. Click Activate to unsuspend.
2. Select View Users tab, search for the user, and click the User ID hyperlink to open the user’s profile.
3. Scroll to the Application Settings section. Click Activate to unsuspend.
Assign Additional Administrators
As an Organization Administrator, you can assign additional Organization and Application Administrators. Exostar highly recommends having multiple administrators to alleviate any request back-up or issues if someone were to leave the company.
IMPORTANT! If your Organization Administrator is no longer available, and an admin change is required, you must reach out to Exostar’s Customer Support for a Change Authorization Form. Please see the Change Administrator section below for additional information and instructions.
To assign additional administrators:
1. Login to your MAG account. Select the Administration tab.
2. Select View Users tab, search for the user, and click the User ID hyperlink to open the user’s profile.
3. Scroll to the Application Settings section. Select the desired role from the Role column.
4. If assigning the Application Administrator role, or updating applications for a user to administer, you must select the application you want the user to administer by selecting Update.
5. Once you click Update, check the Select column for the applications you want the user to administer. Click Done.
6. To complete role and/or Application Administration, scroll to the bottom of the page and click Submit.
NOTE: If you are the only Organization Administrator for your organization’s account and you change your role, there will not be an Organization Administrators for the account. In this circumstance, please ensure you assign another user the Organization Administrator role before removing the role on your account.
2. Select View Users tab, search for the user, and click the User ID hyperlink to open the user’s profile.
3. Scroll to the Application Settings section. Select the desired role from the Role column.
4. If assigning the Application Administrator role, or updating applications for a user to administer, you must select the application you want the user to administer by selecting Update.
5. Once you click Update, check the Select column for the applications you want the user to administer. Click Done.
6. To complete role and/or Application Administration, scroll to the bottom of the page and click Submit.
NOTE: If you are the only Organization Administrator for your organization’s account and you change your role, there will not be an Organization Administrators for the account. In this circumstance, please ensure you assign another user the Organization Administrator role before removing the role on your account.
Change Admin / Change Authorization
If your Organization Administrator is no longer available, an admin change or Change Authorization is required.
To change the administrator for your organization:
1. Contact Exostar Customer Support to report the change and request a DocuSign Change Authorization Form.
NOTE: The form is sent via email, along with a case number to track the request.
2. Click View Documents in the received email. A pop-up displays with the DocuSign Change Request agreement. Check the box for I agree to do business electronically with Exostar LLC.
3. Review and complete the form. Include the MAG Organization Name, Exostar ID and Organization ID.
NOTE: To locate your company’s organization details, navigate to the My Account tab in MAG, and click View Organization Details.
4. If you have an existing MAG account, ensure you include your Existing User ID in the User ID field. Failure to do so may result in creation of a new account.
5. If an existing Organization Administrator is still active and you are requesting an Organization Administrator change, include a letter on company letterhead.
NOTE: The letter must include a statement about the replacement request for the current Administrator, who the new Administrator is, and the non-compliant account will no longer be accessed. The existing Administrator accounts are deleted.
6. Complete the Authorization/Change Requestor section at the bottom of the form. Click Sign Here and complete document signing.
7. Click Finish. The request routes to Exostar, and is tracked via the case number.
NOTE: The form expires within three days of receipt. If you need assistance with form completion, contact Exostar Customer Support.
NOTE: The form is sent via email, along with a case number to track the request.
2. Click View Documents in the received email. A pop-up displays with the DocuSign Change Request agreement. Check the box for I agree to do business electronically with Exostar LLC.
3. Review and complete the form. Include the MAG Organization Name, Exostar ID and Organization ID.
NOTE: To locate your company’s organization details, navigate to the My Account tab in MAG, and click View Organization Details.
4. If you have an existing MAG account, ensure you include your Existing User ID in the User ID field. Failure to do so may result in creation of a new account.
5. If an existing Organization Administrator is still active and you are requesting an Organization Administrator change, include a letter on company letterhead.
NOTE: The letter must include a statement about the replacement request for the current Administrator, who the new Administrator is, and the non-compliant account will no longer be accessed. The existing Administrator accounts are deleted.
6. Complete the Authorization/Change Requestor section at the bottom of the form. Click Sign Here and complete document signing.
7. Click Finish. The request routes to Exostar, and is tracked via the case number.
NOTE: The form expires within three days of receipt. If you need assistance with form completion, contact Exostar Customer Support.
Manage Bulk Actions
To Upload Users in Bulk:
1. Login to your MAG account, and click the Administration tab.
2. Select User Upload.
3. To upload your .CSV File, then click Browse for .CSV File and select the desired file.
4. Select the applications you want to add users to.
5. Click Validate and fix any possible errors.
6. Click Commit.
NOTE: Please reference the MAG Bulk Uploads page for additional information.
2. Select User Upload.
3. To upload your .CSV File, then click Browse for .CSV File and select the desired file.
4. Select the applications you want to add users to.
5. Click Validate and fix any possible errors.
6. Click Commit.
NOTE: Please reference the MAG Bulk Uploads page for additional information.
To Suspend Application Access in Bulk:
1. Login to your MAG account and navigate to the Administration tab.
2. Select Bulk Actions tab.
3. To upload your .CSV file, click Browse for .CSV File, then select the desired file.
4. Choose to Suspend or Unsuspend Application. Select the Application.
5. Click Validate and fix any errors.
6. Click Commit.
NOTE: An acknowledgement page displays with processed file results. Please reference the MAG Bulk Uploads page for additional information.
2. Select Bulk Actions tab.
3. To upload your .CSV file, click Browse for .CSV File, then select the desired file.
4. Choose to Suspend or Unsuspend Application. Select the Application.
5. Click Validate and fix any errors.
6. Click Commit.
NOTE: An acknowledgement page displays with processed file results. Please reference the MAG Bulk Uploads page for additional information.
To Delete or Suspend Users in Bulk:
1. Login to your MAG account, click the Administration tab.
2. Select the Bulk Actions tab.
3. To upload your .CSV file, click Browse for .CSV File and select the desired file.
4. Choose to Suspend, Reactivate or Delete MAG Account.
5. Click Validate and fix any errors.
6. Click Commit.
2. Select the Bulk Actions tab.
3. To upload your .CSV file, click Browse for .CSV File and select the desired file.
4. Choose to Suspend, Reactivate or Delete MAG Account.
5. Click Validate and fix any errors.
6. Click Commit.
Modify Email Subscriptions
Organization and Application Administrators can disable selected system-generated administrative emails.
To Modify an Email Subscription:
1. Login to your MAG account.
2. Click the Profile Menu (your name at the top, right corner) and select Email Settings.
3. Select email notifications you want to turn on or off.
4. Click Submit.
2. Click the Profile Menu (your name at the top, right corner) and select Email Settings.
3. Select email notifications you want to turn on or off.
4. Click Submit.