Access Requirements: In order to access Blue Origin applications, you must receive an invitation for an Exostar Managed Access Gateway (MAG) account, as well as purchase and set-up a Phone One Time Password (OTP) without Proofing credential. Please see the entire process outlined below.
Step 1. Activate Account
Locate the MAG account activation email. Please review all information provided in the email, paying special attention to your Account Details and User ID.
IMPORTANT: If you are designated as the Organization Administrator or an Application Administrator for your organization, please see more information on your administrative responsibilities on the MAG Organization Administrator page.
Exostar offers a quarterly MAG Administration Webinar that provides information and instructions on administrative responsibilities. Please see the MAG Webinars page for available dates and registration information.
2. Review the Password Policy. Input and confirm your permanent Password. Click Next.
NOTE: Your Email Address or User ID and Password are used for all subsequent MAG logins.
3. Review the information on the screen concerning your security questions. Select and answer your Security Questions. Click Next to open the MAG Dashboard.
Step 2. Accept Terms and Conditions
Once you successfully activate your MAG account, you must accept the application-specific Terms and Conditions. To accept Terms and Conditions, you must have the Organization Administrator or specific Application Administrator role. Access to applications is not possible for any users in your organization until Terms and Conditions are accepted.
NOTE: If the tile says Pending Terms, an Organization Administrator or Application Administrator must accept terms.
2. Click Continue to view the Terms and Conditions.
3. Review the Terms and Conditions. Check the box for I have read and agree to these terms and conditions. Click Next to complete the process.
Step 3. Purchase Credential
To access Blue Origin applications, you must purchase a Phone One Time Password (OTP) without Proofing credential from Exostar’s Web Store.
2. Click the Get 2FA button from the My 2FA Credentials section on the MAG Dashboard.
3. Select Blue Origin from the Partner drop-down menu to display a list of acceptable credentials.
4. Select the radio button for the Phone One Time Password (OTP) (Without Proofing) (1 Year) option. Click Next.
5. Review and input any missing information in the Primary Information, Billing Address, and Shipping Address sections. Click Next.
6. Select your Payment Method (credit or invoice). Input payment details, if paying by credit. Click Submit.
NOTE: If you pay by invoice, you must make full payment prior to receiving the hardware token.
A confirmation screen displays and you receive a confirmation email, containing the license key required for the activation process. You can activate directly from the confirmation screen, or later via your MAG user account and the My 2FA Credentials section.
Blue Origin Accepted Credentials
To access certain applications, you must receive an invitation from Blue Origin, and they may require two-factor authentication (2FA) credentials, in conjunction with your MAG User ID/Email Address and Password. You can contact Blue Origin directly to verify which credential is needed for the specific application you are accessing. Below is a list of accepted credentials by Blue Origin:
| Application | Accepted Credentials |
|---|---|
| Blue Origin Onboarding Module Sourcing Procure to Pay | Main Credential: – Phone OTP without Proofing Other Acceptable Credentials: – Exostar Mobile ID without Proofing – Hardware OTP Token without Proofing – Enterprise Access Gateway (EAG) – FIS MLOA Hardware Certificates |
Step 4. Activate License Key
Once you successfully complete your purchase, you can activate your credential directly from the web store or through your MAG account.
2. In the My 2FA Credentials section on the dashboard, under Have a License key?, click the Enter it here link.
3. Input the License Key in the field provided. Click Next .
Step 5. Register Phone Number
The next step is to register a phone number and bind it to your MAG account. You can register up to three phone numbers to your OTP. It is highly recommended you register at least two phone numbers. In instances where you no longer have access to one phone number, you can login with the other and update the numbers associated with your subscription. For the protection of your account, the phone numbers can be updated only after you login with your phone OTP.
2. Enter your Phone Number (do not include parenthesis, dashes, etc). Then enter your number again to confirm.
3. Select the method to receive your verification code, choose either Send Text or Send Voice.
4. Enter the code you received on your phone into the Verification field provided on the screen. Select Next.
A confirmation screen will display, and you can now access the desired applications.
Step 6. Access Applications
Now that you successfully set-up your MAG user account and Phone OTP without Proofing credential, you can access Blue Origin applications.
2. Locate the desired application tile, located in the My Applications section of the MAG Dashboard. Click Launch.
3. Select the phone number to which you want use to receive the OTP code. Choose the delivery method. Click Send to have the code sent to your phone.
4. You will receive the OTP code on your phone. Enter the code in the OTP code field. Click Next to open the P2P application.
NOTE: Once you receive the code, it will be valid for the next two minutes. If the code expires, click Resend verification code.