The post Account Change Request Form appeared first on MyExostar.

FedRAMP MAG Release Notes 1.0

Posted December 2025

These release notes are specific to FedRAMP mode in MAG. To learn more, click the link to view the release notes – FedRAMP MAG Release Notes 1.0

Release Notes Version 8.1

Posted August 2025

View the latest release notes here.

Release Notes Version 8.0

Posted July 2025

View the latest release notes here.

To see an overview of the upcoming changes, click here for MAG 8.0 Overview.

Release Notes Version 7.10 Available

Posted April 2025

View the latest release notes here.

Release Notes Version 7.9 Available

Posted March 2025

View the latest release notes here.

Release Notes Version 7.8.3 Available

Posted January 2025

View the latest release notes here.

Release Notes Version 7.8 Available

Posted September 2024

View the latest release notes here.

The post MAG Announcements appeared first on MyExostar.

Approved Authenticators

Please select the desired FIDO credential below to view approved authenticators:

• FIDO FIPS Security Keys
• FIDO Security Keys

Use the tool below to see if your passkey is an approved authenticator:

Other Products Supporting FIDO Authenticators

The lowest assurance level MAG allows for FIDO Authenticators for all MAG customers is listed on the table below:

• FIDO FIPS Security Keys
• FIDO Security Keys
• FIDO Security Keys L1
• Synced Passkeys with no metadata restrictions as per the FIDO Alliance. That includes the following:
  • Synced Passkeys with Microsoft platform (Fabric)
  • Synced Passkeys with Apple iCloud platform (Fabric)
  • Synced Passkeys with Google Password Manager platform (Fabric)

Extract AAGUID

How to Extract Your AAGUID and Device Details

This steps below explain how to extract the AAGUID and device details from your FIDO/passkey security key. Support uses this information to confirm device compatibility and troubleshoot registration issues.

Important Notes: The AAGUID identifies the device type, not you. No personal information is exposed. If a key is partially registered, Support may need to remove it before you can re-register.

The post Accepted Passkey Authenticators appeared first on MyExostar.

Org Admin T&Cs (5 Years)

Starting June 20, MAG will begin enabling this requirement for organizations in daily phases through June 30. Organization Administrators will be required to accept Exostar’s Terms and Conditions once every 5 years. When the Organization Administrator logs into MAG, they will be required to accept the Terms and Conditions immediately once your organization has been enabled. If the Org Admin does not accept the Terms and Conditions immediately, your organization and users will not be able to access MAG or other applications.

1. Organization Admin logs into MAG.
2. The Terms and Conditions will display. The Org Admin must accept the following: MAG Service Agreement, General Terms & Conditions, Privacy Policy, and MAG Terms of Access.
3. Read each document, then click Agree and Continue.
4. After the Org Admin accepts the T&Cs, you will be redirected back to the MAG Dashboard. Or if the authentication was initiated by the Service Provider application, you will be redirected back to the SP application.

First Time Login

1. For the first-time login, Org Admin accepts the invitation from Adoption Admin or creates a new Organization via Self-Registration.
2. The Org Admin sets up their MAG account by creating a new password, setting up security questions, and completes account activation.
3. Next click Continue, the Terms and Conditions will display. Read through and accept the Terms & Conditions, MAG Service Agreement, Privacy Policy, and MAG Terms of Access. NOTE: If you do not accept the Terms & Conditions at this time, you will be prompted to complete the T&Cs agreements on your next login.

T&Cs Not Accepted by Org Admin

If a user tries to login and the Terms and Conditions have not been accepted by the Org Admin:

1. The User tries to login to their MAG Account.
2. The User will receive an error message that the Org Admin must accept the T&Cs before the user can access their MAG account.

Frequently Asked Questions

The post MAG Org Admin Terms & Conditions appeared first on MyExostar.

Reset Password

If you have forgotten your password when you login to the MAG portal, follow the steps below to login and reset your password.

1. Login to MAG – https://portal.exostar.com, with your Email/User ID.
2. On the Password page, select Forgot Password? link. 
3. You are redirected to the Account Recovery page. Select the method to reset your password. Click Next. 
4. Follow the prompts to reset your password.
   NOTE: If you have multiple accounts associated with your email address, please contact Exostar Customer Support for assistance.

Password Requirements for MAG:
– Must be at a minimum 15 characters long
– Maximum of 64 characters long
– Must include (1) letter AND (1) number AND (1) special character
– NO leading or trailing spaces
**IMPORTANT: Passwords are checked against a breached password list to ensure that users are not using a password that was already compromised on another website. Users will receive an error when a password is part of breached compromised list (https://haveibeenpwned.com/).

Password Error

If you receive an error message that says “Your password has been detected to have been breached on another site and cannot be used. Please provide another”. You will need to enter a new password in the required fields.

NOTE: Passwords are checked against a breached password list to ensure that users are not using a password that was already compromised on another website. Users will receive an error when a password is part of breached compromised list (https://haveibeenpwned.com/).

Change Password

If you know your password and want to change/update it, follow the steps below.

1. Login to MAG and select the My Account tab. Select the Change Password sub-tab.
2. To change your password, select the “To change your password click here“ link.
3. You will be redirected to a screen to Change Password.
4. First enter your old password. Next enter a new password and then re-enter the same password again. Once you have met the password requirements, click Next to save your new password.

Expired Password

If you attempt to login and your password expired, you will receive an expired message. Follow the steps below to reset your password:

1. Click the link to Reset.
2. On the Account Recovery page, select the desired recovery method. Click Next.
3. Depending on the recovery selection, follow the prompts and click Next. (NOTE: Select the Verify a different way link to make a different selection, if necessary).
4. The Create New Password screen displays. Enter your new Password, then re-enter the new password again. Click Next.

Contact for Additional Assistance

If you need help, please contact your Organization Administrator or Exostar Customer Support for further assistance.

View frequently asked questions (FAQs) for MAG here.

The post MAG Passwords appeared first on MyExostar.

To Connect Accounts

1. Under the My Account tab, click Connect Accounts.
2. The Connect Accounts section displays any accounts with a matching first name, last name, and email address, as well as notes indicating whether the account is eligible for connection. Select an account to designate as a child.
3. Enter the password of the account to which you want to connect. Click Connect Account.
4. A notification will display your account connection was successful. To add additional child accounts, click Return to Connect Accounts Main Page.
5. From Connected Account Details, you can add a memo to the account for organizational purposes. Memos display during login. You can also disconnect all linked accounts.

Login to Connected Account

After connecting accounts, you are required to login with your parent account credentials. If you try logging in using the child account (and not the parent account), you will receive the following message, Your User ID/Password combination was not recognized.

1. Enter your Parent Account Credentials first, then select the account you want to access. Click Next to complete the login process.
2. Enter your Password. Click Next to complete login in with your connected account.

The post MAG Link Accounts appeared first on MyExostar.

Process

During an in-person proofing appointment, the applicant will attest to their status as a US Person and to their affiliation outside of the US. Customers and consumers of this information will base user access decisions on these attestations from the user.
Exostar Trusted Roles, responsible for providing final authorization for the issuance of certificates are prompted and required to assert US Person and Non-US Affiliation statuses during the system approval. The following outlines that policy. Questions on this procedure or policy should be directed to the Exostar Security office and Security Services program members prior to approval.

Form Information

On the form you will find a description of what constitutes as a “US Person” and a “Non-US Affiliation”.

US Person

“US Person” is a qualification of an individual, defined by ITAR regulations, that indicates an individual’s lawful permanent residence in the US. To assert a “US Person” value for the US Person status during system approval, you must (any other combinations shall result in a “Non US Person” selection during approval):

1. Verify that the user entered the “United States” or an abbreviation thereof into one of the Citizenship boxes OR
2. The user checked the “Yes” box next to the “I am a lawful permanent resident of the United States (i.e., a Green Card holder)” question.

Non-US Affiliation

“Non-US Affiliation” defines a user as being affiliated outside of the United States. That affiliation is defined by either having a citizenship outside (or in addition to) the US or being employed by a company that is incorporated outside of the us. To assert that a user has a Non-US Affiliation, a “Non-US Affiliation” selection during system approval, you must verify one of the following is true:

1. The user has indicated that they have a citizenship outside of the US (including a dual citizenship), which is based on their responses in the “I am a citizen of the following country or countries” entry boxes, OR
2. That their employer is incorporated outside of the US, which is based on their “No” selection next to the “My primary employer is incorporated inside the United States” question.

Please note, the form can be downloaded within MAG Application.

Steps to Complete Form

1. This process takes place after you have activated your OTP credential without proofing.
2. Next you will log into the MAG portal.
3. From your MAG Dashboard, select the My Account tab.
4. Next you will see the information form displayed as an attachment labeled “us_att.PNG“.
5. Click the form to download and fill it out.
NOTE: The form is generated using the user’s account details for the Exostar ref, user_id and name fields.

The post US Person Attestation appeared first on MyExostar.

The post Exostar MAG-FIS New Signing CA Update appeared first on MyExostar.

Department of War Common Access Card (DoW CAC) is a Third-Party Credential (CAC, PIV, NGC OneBadge, Canada DND PKI Smart Card) smart card, issued by the United States Department of War (DoW), NASA, or Northrup Grumman as a standard identification. It is also used for physical access to buildings, controlled spaces, and to gain access to computer networks and systems. Exostar now accepts Third-Party Credentials as an acceptable digital credential to access applications and services behind Exostar’s Managed Access Gateway (MAG) Platform.

As a courtesy to our users, Exostar reminds you that prior to linking your Department of War Common Access Card (DoW CAC) to your Exostar account you should confirm your usage of the DoW CAC on the Exostar Exchange is compliant with DoW requirements for its use. Section 1.4 of the DoW Certificate Policy stipulates that DoW CACs “shall only be used for transactions related to DOW business. Please verify compliance with this stipulation prior to using your CAC to access Exostar products, or any system accessed through Exostar’s Managed Access Gateway”.

Get Started

Access Requirements: In order to link your third-party credential, you must have an Exostar’s Managed Access Gateway (MAG) Account. Please see the steps below to complete the linking process. Prerequisites:
– The CAC Registration URL provided by your sponsor and application list for subscription (received via email and is not sent by Exostar).
– A valid DoW-issued CAC, NASA issued PIV Card, or Northrop Grumman One Badge.
– Card reader (may be a part of your computer and is not provided by Exostar).

If a MAG account has already been created for you, please skip to the Linking Credentials section. When receiving certificate prompts, please ensure the following:

• DoW CAC Users: Select the signature certificate issued by the DOW EMAIL CA (e.g. DOW EMAIL CA-##”, “DOW JITC EMAIL CA-##). This certificate contains your email address, which is required when linking your CAC to your MAG account. Although you must select the EMAIL certificate when linking your CAC to your account, you may choose either certificate when logging in.
• PIV Users: Select the PIV Authentication (9A) certificate.
• NGC One Badge Users: Select your Authentication certificate (this certificate has an “Enhanced Key Usage” that includes “Client Authentication (1.3.6.1.5.5.7.3.2).”

Step 1. Register for MAG

Once you complete the registration process and receive the confirmation email, an Administrator reviews your Registration Request. The account and application subscriptions are approved, subject to confirmation received from the sponsor. You will receive notification of account and application approval status via email from Exostar.

Step 2. Link Credential

Step 3. Login with Credential

To learn more about Third-Party Credentials or troubleshooting tips, view the user guide.

The post DoW Third-Party Credential appeared first on MyExostar.

Registration FAQs

Login FAQs

Additional Tips:
– Do not refresh your browser during Account Activation process or click the browser back button. This may end your session.
– If you have digital certificates installed on your computer, you may be prompted to select the certificates during login. Click Cancel to continue your registration to MAG. 

Credential FAQs

What Types of Credentials does Exostar offer?

– Standard User ID/Email and Password
– One-Time Password (OTP) Hardware Token with or without identity proofing
– Phone One-Time Password (OTP) with or without identity proofing
– Exostar Mobile ID Bundle (powered by Authy), includes Phone OTP and Exostar Mobile ID with or without identity proofing
– Federated Identity Service (FIS) Digital Certificates: Basic Level of Assurance (BLOA), BLOA Secure Email, Medium Level of Assurance (MLOA) Software & Hardware.
– Exostar’s Enterprise Access Gateway (EAG) solution

How do I Purchase Credentials?

1. Login to your MAG account and click the Get 2FA button on your dashboard/home page. 
2. You are redirected to Exostar’s web store. From the Purchase your Exostar Subscription page, select the desired credentials.
3. Follow the prompts to complete your purchase.

Can Credentials be Shared?

No, user accounts and activated credentials cannot be shared and is against Exostar’s policy. OTP Hardware Tokens, Phone OTP, and Exostar Mobile ID subscriptions that have not been activated can be transferred.

Why can’t I access my Application even though I Purchased & Activated my Credentials?

Either you purchased an incorrect credential or have not logged in with your activated credential yet. If you purchased an incorrect credential, you are required to purchase the correct credential. To confirm the credential you logged in with, follow the steps below:
1. From the MAG Dashboard, click Launch from the application card or you may click Elevate Credential Strength (green button) from the My 2FA Credentials section.
2. You are redirected to the Two-Step Verification page, that displays a list of 2FA Credentials associated with your account.
3. Select one of the methods and proceed with the authentication process.
4. After you return to the MAG Dashboard, your credential strength displays and you should be able to open the application. 

Why is my OTP Credential still Suspended even though I Purchased a Renewal?

Please note it can take up to 24 hours for the renewal to process. If it has exceeded 24 hours, please contact Exostar Customer Support.

Can I receive a Refund for my Credential Purchase?

eTools purchases, activated credentials, expired license keys for products or used renewals are ineligible for refund. For questions about refunds, please contact Exostar Customer Support.

Credentials by Partner / Application

The credential type is dependent upon the security requirements for the application you are accessing. Please review the table below, and if you cannot find the information or need additional assistance, please contact Exostar Customer Support or the representative of your partner organization. Please see the MAG Credentials page for the credentialing matrix.

Additional Resources

Please review the following pages to learn more about One-Time Password and Federated Identity Service (FIS).

• One-Time Password
• Federated Identity Service
• OTP FAQs

The post MAG Registration & Login FAQs appeared first on MyExostar.