This pages walks through how to register your organization or a user for a Secure Access Manager (SAM) account. To onboard the SAM application, view the first time registration steps below for your organization or user.
Register – Organization
To onboard SAM, you must first register your company/organization in SAM. During registration, provide the organization details, and designate a single or multiple employees to serve as Organization Administrators (Org Admins) for the company. Org Admins will be responsible for adding and managing company users, approving user self-registrations, and maintaining the vendor profile information. An Org Admin can be designated as a Company Contact, or this role can be assigned to a different company employee.
The Point of Contact (POC) in your company will be responsible for registering your company in SAM (see Step 1). During registration, the POC will assign your company’s Organization Administrator. This individual will be responsible for completing Steps 3 and 4.
Step 1. Register your Organization in SAM
Follow the steps below to register your company/organization in SAM.
Please note that during registration you will be able to register your company only for publicly available applications. If you need to access applications available by invitation only, contact Exostar’s Customer Support to have these applications added to your organizational account.
2. Fill out the required information (marked with the red asterisk*) in the Organization Information section.
3. Fill out the required information in the Organization Administrator section. The designated administrator will receive the activation and login instructions.
4. Complete the Company Contact information, and click Next to continue. If the Organization Admin will also act as the Company Contact, select Same as Organization Administrator.
5. Select the desired product from the list on the Products and Services page. Click Next.
6. Designate an Application Administrator for each selected product or application.
NOTE: An Application Administrator can be the same person as the Organization Administrator. If you select the latter option, the user information will be pre-populated. Click Next to complete your registration.
7. You will receive a Submission Confirmation page. Record the reference number for your registration request.
Step 2. Registration Approval
While Exostar is working on confirming and approving your company’s organizational account, you will be receiving emails confirming your SAM registration status.
– Organization Registration – Submitted to Secure Access Manager: You will receive this email immediately after submitting your registration request, along with the reference number for your record.
– Account Registration – Accepted in Secure Access Manager: The Organization Administrator will receive this email when the organization’s registration request is approved. This email will contain the important login information.
– Secure Access Manager Point of Contact – Organization Registration Approved: The designated Point of Contact will receive this confirmation when the organization account is approved.
Step 3. Activate SAM Account
To finalize the setup of your organization/company in SAM, Organization Admins will be invited via email from Exostar to activate their accounts.
2. You will redirected to SAM’s welcome dashboard, click Let’s Get Started.
3. Create a New Password by entering your new password, then re-enter your password to confirm. Then click Next.
4. Next select your Security Questions from the drop-down list and provide the Answers. Then click Next.
5. Your account is now active. Click Continue to access the SAM Dashboard.
Step 4. Accept the Terms & Conditions
In order for users in your company/organization to access partner applications, the Organization Administrator must first accept Terms & Conditions for each application.
2. Navigate to the Home page. A View Service Agreement link will display next to the application(s). Click View Service Agreement.
3. Review the Agreement, and then click I Agree to accept it. You will receive a confirmation message.
Step 5. Add Users in SAM
After the Terms & Conditions are accepted, the Org Admin can start adding company users to SAM. Company users can be added to SAM in four ways:
2. User Upload: this action is available to the Org Admin under the Administration tab in SAM. Use this option to upload multiple users at the same time.
3. Self-Registration: in this scenario, the users self-register for a SAM account first. The Org Admin then approves a self-registration request under the Registration Requests tab in SAM.
4. SAM Inviter API: this action is available to the Inviter API role. Use this option to add users individually on the Inviter API to create user accounts.
Register – Users
To access SAM, a user must first be added by an Organization Administrator during the onboarding process. After the Organization Administrator creates a SAM account for you, you will receive an account activation email.
Step 1. Activate SAM Account
1. Click the Account Activation link provided in the email. You will be redirected to SAM’s activation screen. If you do not have the email, go to https://secureaccess.exostar.com, and enter your email address in order to have it resent.
2. After clicking the activation link, you are directed to SAM’s activation screen. Click Next to proceed.
3. Create and confirm your password, then click Next.
NOTE: Passwords expire after 90 days.
4. Create your Password Reset Secrets by selecting and responding to four (4) security questions. Then click Next.
5. A confirmation message will display. Click Next to redirect to Exostar’s SAM portal.
Step 2. Purchase & Register Credentials
One-Time Password credentials are mandatory if you need to access partner applications that require two- factor authentication (2FA). Therefore, if you are attempting to access an application that requires 2FA, you need to purchase a security credential.
Purchase & Register your Credential
One-Time Password credentials are mandatory if you need to access partner applications that require two-factor authentication (2FA). Exostar offers three types of OTP credentials:
1. Phone OTP Credential
2. Exostar Mobile ID Credential
3. OTP Hardware Token
View the steps below to register your specific credential (if applicable). Please note, that in some instances you will have the option to choose the OTP credential type that you would like to register. If your organization is not setup to accept OTP Hardware or Exostar Mobile ID, you will only see Phone OTP.
2. Navigate to the My Account tab.
3. Click the Manage Credentials sub-tab.
4. Click Register.
5. Choose the OTP Hardware Token credential to register, and click Submit.
6. For OTP Hardware, enter your physical address, and click Submit.
2. Click Send Code.
3. You will receive the verification code via your selected delivery method.
4. Enter the received code in the Verification Code field.
5. Click Submit, receive the Successful Registration message, and click Complete.
2. Select country, and enter your mobile phone number. Click Register Phone.
3. View the push notification or app from your mobile device to Approve or Deny. If this is unsuccessful, obtain a Token ID from the app. Click the X to cancel One Touch.
4. Enter the Token ID that displays in the Authy™ app in the Soft OTP field and click Submit.
5. You will receive a successful registration message. Click Complete.
Step 3. Identity Proofing
Depending on the credential requirement for your application, you may need an OTP credential with or without the identity proofing upgrade. Identity Proofing is the process of verifying your identity with Exostar. If your OTP credential does not require identity proofing, proceed to the OTP Registration section of this guide to learn how to register your credential.
There are two types of proofing:
- US Based Users – Experian Proofing Service: For US-based users, it is preferred if you proceed through the Experian proofing by completing the Credit Bureau Based Proofing process. During this process, you will be prompted to answer questions about past credit or residential history, provided and verified by a credit bureau.
- International Based Users – Exostar Webcam Proofing: International-based must complete the Webcam Proofing process. During this process, you will meet and verify your identity virtually, with a proofing agent.
2. A list of questions regarding your financial and residential history will display. These questions, and your responses, will be used to verify your identity, so please answer carefully and accurately.
3. Once you complete all questions, click Next to continue.
NOTE: If you answered questions incorrectly, but the credit bureau was able to locate you with your personal information, you will receive an activation code in four business days via postal mail. Use this activation code to activate your credential.
4. If the credit bureau was unable to verify your identity, the system will redirect you to schedule the Webcam proofing interview.
5. Upon successful completion of proofing, you will be directed to register your OTP credential.
Exostar Webcam Proofing takes place within a secure Microsoft Teams meeting.
2. On the Web Proofing calendar, select an available date and time. Click Continue.
3. Enter your Contact information. Click Confirm.
4. You have successfully scheduled your appointment. The appointment confirmation page will display, and you will also receive an appointment confirmation email.
NOTE: An Exostar proofing agent will contact you on your scheduled appointment date. The proofing appointment can take up to 30 minutes.
5. You will be contacted by an Exostar Proofer on the day of your appointment.
During your proofing appointment, you will be required to answer a series of “yes” or “no” questions and provide acceptable, unexpired identification via webcam to the proofer. Visit the Live Video Proofing Resource page for more information.
6. Once you successfully complete proofing, the proofing agent will provide you with an activation code. Use this code to activate your credential.
Step 4. Login to SAM
After you have activated your SAM account and registered your credential (if applicable), you can login to your SAM dashboard. Follow the steps below to access the SAM portal.
Login to SAM with your registered OTP credential, if you need to access secure applications. Please note that you need to login with your User ID/Email and Password first. Next follow the steps below to login with an OTP credential:
1. Login to: https://secureaccess.exostar.com.
2. Enter your UserID/Email and click Next.
3. Enter your Password, and click Next.
4. You are now logged into your SAM account. Launch applications from your SAM Home tab.
Next, depending on your specific credential (if required) review the applicable step below.
2. Select One Time Password. Click Continue.
3. You will receive the OTP Authentication page. Enter the One-Time Password code displayed on your token in the One-Time Password field. Click Authenticate.
4. You are now authenticated with your OTP Hardware token. The credential strength (upper, right corner) will display: Hardware OTP.
2. Navigate to My Account, and click OTP in the left-hand menu.
3. Click Elevate.
4. The phone number and delivery method default will display. Next click Send.
5. You will receive the authentication code via your selected delivery method. Enter the code in the field provided. Click Next.
6. You are now authenticated with your Phone OTP credential. The credential strength (upper, right corner) will display: Phone OTP.
2. Select One Time Password. Click Continue.
3. To approve with One Touch, click Approve from the push notification received via your mobile device.
4. If One Touch is not working or you want to enter the Token ID manually, click X.
5. Enter the code that displays in the Authy app on your mobile device in the Soft OTP field. Click Submit.
6. You are now authenticated with your Exostar Mobile ID credential. The credential strength (upper, right corner) displays: Mobile ID.
NOTE: You must activate your account within 180 days of receiving the activation email, or the account will be deleted. The account activation email will be resent twice every 30 days, and new activation notifications will supersede older activation emails.
SAM Password Requirements
| Password Requirements |
|---|
| – Characters must be Unicode characters belonging to the POSIX – Must be at least a minimum of 8 and maximum of 64 characters long – Must contain at least 1 alpha character and 1 numeric character and 1 special character – Must contain at least 4 distinct characters – Must have no leading or trailing white spaces, embedded space (x20) are allowed and count towards the non-alpha requirement – Cannot use the past previous ten (10) passwords |
SAM Videos
SAM User Registration
SAM User Registration (Text)
Next Steps
To learn more about the SAM Platform, choose from the options below: