Welcome! If this is your first time accessing Exostar you will need to register for a Managed Access Gateway (MAG) account. MAG is a secure identity and access management cloud service for the Aerospace & Defense industries. A majority of our applications require a MAG account before you can access the secure applications behind it.
To begin registration, you will receive an email from Exostar inviting you to activate your account. Once you receive your email invitation, follow the steps below.

Life Sciences & Healthcare
Please note, not all of our applications require a MAG account, if you are a Life Sciences & Healthcare customer, click the hyperlink for a Secure Access Manager (SAM) account.

MAG Registration

Follows the steps and videos below to register and setup your MAG account for the first time.

Step 1. Register for MAG

You will receive an email invitation from your partner organization to complete account registration in MAG.

Step 2. Activate Account

Once Exostar approves your organization registration, you will receive an account activation email. Please review all information provided in the email, paying special attention to your Account Details and User ID. 

IMPORTANT: If you are the first person to register your organization and accept the invitation, you are automatically designated as the Organization Administrator for your company. For more information on your administrative responsibilities, please see the MAG Organization Administrator page.

Exostar offers a quarterly MAG Administration Webinar that provides information and instructions on administrative responsibilities. Please see the MAG Webinars page for available dates and registration information. 

In order for users in your company to access partner applications, the Organization Administrator or Application Administrator must first accept Terms & Conditions for each application. 

Step 3. Purchase Credentials

Pick your credential type below if you are ready to activate your 2FA credential:

• One Time Password (OTP) Credentials
• Federated Identity Service (FIS) Digital Certificates
• Enterprise Access Gateway (EAG) or Third Party Credentials

Step 4. Access Applications

Connect Accounts

After you complete the MAG Account Setup Process, you can connect your accounts if you have multiple logins. To learn how to link your accounts in MAG, view the Link Accounts page.

Next Steps

Learn more about the MAG Platform and choose one of the options below:

• MAG Credentials
• MAG Navigation
• MAG Administrators

The post MAG Get Started appeared first on MyExostar.

Register for EAG

Self-Link your Account

Bulk Load EAG Subscriptions

Organization Administrators and Organization Stewards who want to add multiple users can subscribe users to the EAG service by entering the Remote Identity Provider (R-IDP) for the user in the ridpUserID field in the .CSV file. Once the upload completes, users will receive an email with instructions on how to access Managed Access Gateway (MAG).
NOTE:  You must have an Organization Administrator or Organization Steward role to use the Bulk User Upload feature.

Link Account – JIT Provisioning

Just-In-Time (JIT) Provisioning allows users to be automatically provisioned in MAG. Users go through a one-time registration process and are required to subscribe an application. When account attributes change in the Enterprise, JIT based assertion allows user attributes to be updated in MAG when users federate to Exostar MAG services. Enterprises that have configured and subscribed to EAG (Remote Identity Provider service connection) in MAG can place a URL on their internal website. Employees can self-register for Exostar MAG connected application services. 

The post EAG Get Started appeared first on MyExostar.

Register – Aerospace & Defense

As an Aerospace & Defense customer you will need to register your organization for Exostar’s Managed Access Gateway (MAG) account. MAG is a secure identity and access management cloud service which reduces the time and expense of establishing and maintaining external user accounts. MAG provides web-based single sign-on user access and a single place to connect to partner applications. 

Many of your business partners are likely already part of our large user community of Aerospace & Defense partners/suppliers with Exostar MAG (A&D) credentials, so you will be able to do business faster. Exostar’s MAG Platform will ensure that you have all necessary tools for secure and intelligent collaboration. 

To register your organization for a MAG Account, click the following link: MAG Account Registration.

To learn more about the MAG Registration process, view the MAG Get Started page.

Register – Life Sciences & Healthcare

As a Life Sciences and Healthcare customer you will need to register your organization for Exostar’s Secure Access Manager (SAM) account. SAM consolidates the registration process for connecting partners and applications in a secure environment, while offering flexible management and invitation capabilities to application owners. The authentication gateway supports secure authentication, and provides web-based, single-sign-on access for Life Sciences & Healthcare applications and services hosted by Exostar as third-party, externally-hosted applications. 

To register your organization for a SAM Account, click the following link: SAM Account Registration.

To learn more about the SAM Registration process, view the SAM Get Started page.

The post General Registration appeared first on MyExostar.

Register – Organization

To onboard SAM, you must first register your company/organization in SAM. During registration, provide the organization details, and designate a single or multiple employees to serve as Organization Administrators (Org Admins) for the company. Org Admins will be responsible for adding and managing company users, approving user self-registrations, and maintaining the vendor profile information. An Org Admin can be designated as a Company Contact, or this role can be assigned to a different company employee. 

The Point of Contact (POC) in your company will be responsible for registering your company in SAM (see Step 1). During registration, the POC will assign your company’s Organization Administrator. This individual will be responsible for completing Steps 3 and 4.

Step 1. Register your Organization in SAM

Follow the steps below to register your company/organization in SAM.

Please note that during registration you will be able to register your company only for publicly available applications. If you need to access applications available by invitation only, contact Exostar’s Customer Support to have these applications added to your organizational account. 

Step 2. Registration Approval

While Exostar is working on confirming and approving your company’s organizational account, you will be receiving emails confirming your SAM registration status.

Step 3. Activate SAM Account

To finalize the setup of your organization/company in SAM, Organization Admins will be invited via email from Exostar to activate their accounts.

Step 4. Accept the Terms & Conditions

In order for users in your company/organization to access partner applications, the Organization Administrator must first accept Terms & Conditions for each application. 

Step 5. Add Users in SAM

After the Terms & Conditions are accepted, the Org Admin can start adding company users to SAM. Company users can be added to SAM in four ways: 

Register – Users

To access SAM, a user must first be added by an Organization Administrator during the onboarding process. After the Organization Administrator creates a SAM account for you, you will receive an account activation email.

Step 1. Activate SAM Account

Step 2. Purchase & Register Credentials

One-Time Password credentials are mandatory if you need to access partner applications that require two- factor authentication (2FA). Therefore, if you are attempting to access an application that requires 2FA, you need to purchase a security credential.

Purchase & Register your Credential

One-Time Password credentials are mandatory if you need to access partner applications that require two-factor authentication (2FA). Exostar offers three types of OTP credentials:
1. Phone OTP Credential
2. Exostar Mobile ID Credential
3. OTP Hardware Token

View the steps below to register your specific credential (if applicable). Please note, that in some instances you will have the option to choose the OTP credential type that you would like to register. If your organization is not setup to accept OTP Hardware or Exostar Mobile ID, you will only see Phone OTP.

Step 2A. Register OTP Hardware Token Credential (if required):

1. Login to your SAM Account – https://secureaccess.exostar.com.
2. Navigate to the My Account tab.
3. Click the Manage Credentials sub-tab.
4. Click Register.
5. Choose the OTP Hardware Token credential to register, and click Submit.
6. For OTP Hardware, enter your physical address, and click Submit.

Step 2B. Register Phone OTP Credential (if required):

1. Select Delivery Method (text or voice) and country. Enter the phone number in “Enter” and “Confirm Phone Number” fields.
2. Click Send Code.
3. You will receive the verification code via your selected delivery method.
4. Enter the received code in the Verification Code field.
5. Click Submit, receive the Successful Registration message, and click Complete.

Step 2C. Register Exostar Mobile ID (if required):

1. Install Authy on your mobile device. You can find Authy on your phone’s app store.
2. Select country, and enter your mobile phone number. Click Register Phone.
3. View the push notification or app from your mobile device to Approve or Deny. If this is unsuccessful, obtain a Token ID from the app. Click the X to cancel One Touch.
4. Enter the Token ID that displays in the Authy app in the Soft OTP field and click Submit.
5. You will receive a successful registration message. Click Complete.

Step 3. Identity Proofing

Depending on the credential requirement for your application, you may need an OTP credential with or without the identity proofing upgrade. Identity Proofing is the process of verifying your identity with Exostar. If your OTP credential does not require identity proofing, proceed to the OTP Registration section of this guide to learn how to register your credential.
There are two types of proofing:

• US Based Users – Experian Proofing Service: For US-based users, it is preferred if you proceed through the Experian proofing by completing the Credit Bureau Based Proofing process. During this process, you will be prompted to answer questions about past credit or residential history, provided and verified by a credit bureau.
• International Based Users – Exostar Webcam Proofing: International-based must complete the Webcam Proofing process. During this process, you will meet and verify your identity virtually, with a proofing agent.

Step 4. Login to SAM

After you have activated your SAM account and registered your credential (if applicable), you can login to your SAM dashboard. Follow the steps below to access the SAM portal.

Login to SAM with your registered OTP credential, if you need to access secure applications. Please note that you need to login with your User ID/Email and Password first. Next follow the steps below to login with an OTP credential:
1. Login to: https://secureaccess.exostar.com.
2. Enter your UserID/Email and click Next.
3. Enter your Password, and click Next.
4. You are now logged into your SAM account. Launch applications from your SAM Home tab.
Next, depending on your specific credential (if required) review the applicable step below.

NOTE: You must activate your account within 180 days of receiving the activation email, or the account will be deleted. The account activation email will be resent twice every 30 days, and new activation notifications will supersede older activation emails. 

SAM Password Requirements

SAM Quick Guide

Click here to view the SAM Quick User Guide which navigates through the basic functions and account setup in SAM.

SAM Videos

Next Steps

To learn more about the SAM Platform, choose from the options below:

• SAM Credentials
• SAM Administrators
• SAM Training Resources

The post SAM Get Started appeared first on MyExostar.

Department of War Common Access Card (DoW CAC) is a Third-Party Credential (CAC, PIV, NGC OneBadge, Canada DND PKI Smart Card) smart card, issued by the United States Department of War (DoW), NASA, or Northrup Grumman as a standard identification. It is also used for physical access to buildings, controlled spaces, and to gain access to computer networks and systems. Exostar now accepts Third-Party Credentials as an acceptable digital credential to access applications and services behind Exostar’s Managed Access Gateway (MAG) Platform.

As a courtesy to our users, Exostar reminds you that prior to linking your Department of War Common Access Card (DoW CAC) to your Exostar account you should confirm your usage of the DoW CAC on the Exostar Exchange is compliant with DoW requirements for its use. Section 1.4 of the DoW Certificate Policy stipulates that DoW CACs “shall only be used for transactions related to DOW business. Please verify compliance with this stipulation prior to using your CAC to access Exostar products, or any system accessed through Exostar’s Managed Access Gateway”.

Get Started

Access Requirements: In order to link your third-party credential, you must have an Exostar’s Managed Access Gateway (MAG) Account. Please see the steps below to complete the linking process. Prerequisites:
– The CAC Registration URL provided by your sponsor and application list for subscription (received via email and is not sent by Exostar).
– A valid DoW-issued CAC, NASA issued PIV Card, or Northrop Grumman One Badge.
– Card reader (may be a part of your computer and is not provided by Exostar).

If a MAG account has already been created for you, please skip to the Linking Credentials section. When receiving certificate prompts, please ensure the following:

• DoW CAC Users: Select the signature certificate issued by the DOW EMAIL CA (e.g. DOW EMAIL CA-##”, “DOW JITC EMAIL CA-##). This certificate contains your email address, which is required when linking your CAC to your MAG account. Although you must select the EMAIL certificate when linking your CAC to your account, you may choose either certificate when logging in.
• PIV Users: Select the PIV Authentication (9A) certificate.
• NGC One Badge Users: Select your Authentication certificate (this certificate has an “Enhanced Key Usage” that includes “Client Authentication (1.3.6.1.5.5.7.3.2).”

Step 1. Register for MAG

Once you complete the registration process and receive the confirmation email, an Administrator reviews your Registration Request. The account and application subscriptions are approved, subject to confirmation received from the sponsor. You will receive notification of account and application approval status via email from Exostar.

Step 2. Link Credential

Step 3. Login with Credential

To learn more about Third-Party Credentials or troubleshooting tips, view the user guide.

The post DoW Third-Party Credential appeared first on MyExostar.

Reset Password

If you have forgotten your password when you login to the MAG portal, follow the steps below to login and reset your password.

1. Login to MAG – https://portal.exostar.com, with your Email/User ID.
2. On the Password page, select Forgot Password? link. 
3. You are redirected to the Account Recovery page. Select the method to reset your password. Click Next. 
4. Follow the prompts to reset your password.
   NOTE: If you have multiple accounts associated with your email address, please contact Exostar Customer Support for assistance.

Password Requirements for MAG:
– Must be at a minimum 15 characters long
– Maximum of 64 characters long
– Must include (1) letter AND (1) number AND (1) special character
– NO leading or trailing spaces
**IMPORTANT: Passwords are checked against a breached password list to ensure that users are not using a password that was already compromised on another website. Users will receive an error when a password is part of breached compromised list (https://haveibeenpwned.com/).

Password Error

If you receive an error message that says “Your password has been detected to have been breached on another site and cannot be used. Please provide another”. You will need to enter a new password in the required fields.

NOTE: Passwords are checked against a breached password list to ensure that users are not using a password that was already compromised on another website. Users will receive an error when a password is part of breached compromised list (https://haveibeenpwned.com/).

Change Password

If you know your password and want to change/update it, follow the steps below.

1. Login to MAG and select the My Account tab. Select the Change Password sub-tab.
2. To change your password, select the “To change your password click here“ link.
3. You will be redirected to a screen to Change Password.
4. First enter your old password. Next enter a new password and then re-enter the same password again. Once you have met the password requirements, click Next to save your new password.

Expired Password

If you attempt to login and your password expired, you will receive an expired message. Follow the steps below to reset your password:

1. Click the link to Reset.
2. On the Account Recovery page, select the desired recovery method. Click Next.
3. Depending on the recovery selection, follow the prompts and click Next. (NOTE: Select the Verify a different way link to make a different selection, if necessary).
4. The Create New Password screen displays. Enter your new Password, then re-enter the new password again. Click Next.

Contact for Additional Assistance

If you need help, please contact your Organization Administrator or Exostar Customer Support for further assistance.

View frequently asked questions (FAQs) for MAG here.

The post MAG Passwords appeared first on MyExostar.

1.  Log into your SAM account at https://secureaccess.exostar.com/.
2. Navigate to the My Account tab, and click the Change Password link on the left.
3. The Change Password page displays. Enter your current password. Then enter the new password, and re-enter for confirmation.
4. Click Submit.

Please Note: If you enter an incorrect password 5 times, your account will be locked. The account will automatically unlock after 15 minutes, and then you can try again. If an incorrect password is entered an additional 5 times, your account will be locked and you will need to contact Customer Support.

Change Security Questions

1. Log into your SAM account at https://secureaccess.exostar.com/.
2. Navigate to the My Account tab, and click the Change Security Questions link.
3. Locate and select the question and answer combination to change.
4. Make changes, and click Submit. The on-screen message displays, confirming changes have been processed. You will receive a confirmation email as well.

Password Expired – Reset Password

1. Navigate to your SAM login portal at https://secureaccess.exostar.com/.
2. Enter your email address and click Next.
3. Click the Forgot Password link.
At this point you can select to reset your password using:
– Security Questions
– Phone OTP
– Email OTP
– Exostar Mobile ID 

Reset Password using Security Questions

1. Select Answer security questions and click Next.
2. From the pull-down menu, select and answer two of your security questions. Click Next.
3. Enter your new password, confirm your password, and click Next.
Upon successful password change, the Exostar SAM Platform Home tab displays.

Reset Password using Phone OTP

1. Select Enter verification code from phone, and click Next.
2. Select whether you want to receive the OTP verification code via a text or voicemail, and click Send.
3. After receiving the message with your OTP, enter it, and click Next.
4. Enter your new password, confirm it, and click Next.
Upon successful password change, the Exostar SAM Platform Home tab displays.

Reset Password using Email OTP

1. Select Enter verification code from email, and click Next.
2. Check the email registered to your SAM account. The Email OTP you receive is active for the next five minutes. Enter the OTP, and click Next.
3. Enter your new password, confirm it, and click Next.
Upon successful password change, the Exostar SAM Platform Home tab displays.

The post SAM Passwords appeared first on MyExostar.

Reset/Change Password

Update Profile Information

Connect/Link Accounts

Change Administrators

Change Organization Details

Credential Types

MAG Navigation

SAM Account Management

Reset/Change Password

Change Security Questions

Account Consolidation

Update Profile Information

SAM Credentials

The post Account Management appeared first on MyExostar.

Approved Authenticators

Please select the desired FIDO credential below to view approved authenticators:

• FIDO FIPS Security Keys
• FIDO Security Keys

Use the tool below to see if your passkey is an approved authenticator:

Other Products Supporting FIDO Authenticators

The lowest assurance level MAG allows for FIDO Authenticators for all MAG customers is listed on the table below:

• FIDO FIPS Security Keys
• FIDO Security Keys
• FIDO Security Keys L1
• Synced Passkeys with no metadata restrictions as per the FIDO Alliance. That includes the following:
  • Synced Passkeys with Microsoft platform (Fabric)
  • Synced Passkeys with Apple iCloud platform (Fabric)
  • Synced Passkeys with Google Password Manager platform (Fabric)

Extract AAGUID

How to Extract Your AAGUID and Device Details

This steps below explain how to extract the AAGUID and device details from your FIDO/passkey security key. Support uses this information to confirm device compatibility and troubleshoot registration issues.

Important Notes: The AAGUID identifies the device type, not you. No personal information is exposed. If a key is partially registered, Support may need to remove it before you can re-register.

The post Accepted Passkey Authenticators appeared first on MyExostar.

The post Account Change Request Form appeared first on MyExostar.