0% found this document useful (0 votes)
20 views21 pages

ETMFA - Training Manual

The document outlines the ExpressToll Multi-Factor Authentication (MFA) process, which enhances security by requiring users to verify their identity through an access code sent to their email after entering their password. It details the implementation of MFA agreements for different customer account types within the TCS system, including CSC and LPT-M accounts, and provides instructions for creating new accounts and converting existing ones. Additionally, it explains the login process for customers, including first-time login procedures and access code validity, along with security measures for invalid access attempts.

Uploaded by

hvegetest
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
20 views21 pages

ETMFA - Training Manual

The document outlines the ExpressToll Multi-Factor Authentication (MFA) process, which enhances security by requiring users to verify their identity through an access code sent to their email after entering their password. It details the implementation of MFA agreements for different customer account types within the TCS system, including CSC and LPT-M accounts, and provides instructions for creating new accounts and converting existing ones. Additionally, it explains the login process for customers, including first-time login procedures and access code validity, along with security measures for invalid access attempts.

Uploaded by

hvegetest
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd

ETMFA

ExpressToll Multi-Factor
Authentication
Multifactor authentication (MFA) –
It is a way to verify user identity that is more secure than the classic username-password
combination.

How does MFA work? STEP 1: STEP 2: STEP 3:

You enter your Access Code sent


Enter Access code
password, just like to email associated
and submit.
usual. with the account.
Where is MFA Agreement in TCS?
For CSC Customer in TCS

MFA Agreement checkbox


Navigate to ExpressToll
Login to TCS with valid added in CSC
customer (CSC Account
username and password. maintenance screen in
Holder)
TCS

For LPT Customer in TCS

MFA Agreement checkbox added


Login to TCS with valid Navigate to LPT-M
in Account Profile Tab in LPT-M
username and password. customer
maintenance screen in TCS
For CSC Account:
 MFA Agreement checkbox (enabled by default). in
Additional Demographics Tab while creating new
account (Regular, HOV).
 New MFA Agreement Checkbox in customer account

Changes in TCS details.

For LPT-M Account:


 MFA Agreement checkbox (enabled by default) in
Demographics Tab while creating new account.
 New MFA Agreement checkbox in Account Profile
Tab.
ExpressToll Customer
accounts (CSC):
New MFA Agreement check box is
added in TCS for all CSC regular
and HOV accounts (New, Active,
Pendclose, Credithold, collect)
ExpressToll Customer accounts (CSC): Creating new customer

 Navigate to CSC Account


 Click on Create New Customer
button
 New Customer Account Creation
screen opens
 Fill all required information in
Demographics tab and click next.
 In Additional demographics Tab,
verify MFA Agreement checkbox
enabled by default.
LPT-M Accounts:
New MFA Agreement check box is
added in TCS for LPT-M accounts
(LPT, LPTPayPlan) which is
displayed in Account Profile Tab

Note: MFA Agreement is not


displayed in LPT-UM accounts
(SOFTCOLL, CITATION)
MFA Agreement: Creating new LPT-M customer

 Navigate to LPT-M Account


 Click on Create New Customer
button
 New Customer Account Creation
screen opens
 In demographics Tab, verify MFA
Agreement checkbox enabled by
default.
MFA Agreement: converting LPT-UM to LPT-M in TCS

 Navigate to LPT-UM account.


 Click on Convert to Managed LPT
Account.
 LPT Account to Managed LPT
Account Creation screen is
displayed.
 MFA Agreement checkbox is added
in Demographics Tab.
 MFA Agrmt checkbox is enabled by
default while converting LPT-UM to
LPT-M account.
MFA Agreement: converting
LPT-M to CSC in TCS

• Navigate to LPT-M account


• Click on LPT Customer to
Customer(Sinner to saint) button
• In Additional demographics screen,
MFA Agreement checkbox is enabled
by default.
•Navigate to CSC with Account status = ‘New’
MFA Agreement: •Click on Convert Account

converting CSC to LPT- •Select LPT-M and click on customer agreement

M in TCS •Account converted to LPT-M and MFA Agrmt is displayed in account


profile tab.
How MFA works for customers?
 Customer opens [Link].
 Clicks on My Account (if user already have
account details)
 Enters Email or Account Number and
Password
 Clicks on Log In
First Time Logging In
 If customer is first time logging in to
[Link], click on first time
Logging In in My account.
 Enter account number and click next.
 An email will be sent to customer which is
associated with his account.
How MFA works for customers?
 An email with first time login link is sent
to customer.
 When customer clicks on the link, It will
navigate to First Time Login page in
ExpressToll. Com.
 Fill all the details and click submit.
MFA: Access Code
 When customer clicks on Submit, MFA
screen is displayed asking for unique
access code:
 Customer can request new access
code by clicking on ‘Request New
Access Code’.
Access Code to Email
 Customer receives access code to
the email associated with the
account.

 Note: Customer should have


valid email address to receive
access code
Enter Access Code:
 Customer enters the access code and
clicks on submit
Security Questions &
Answers
 First time logging in to their account:
 [Link] asks for security
questions and answers

 Note: [Link] doesn’t ask for


security questions & answers when
customers logs in to their account for
the second time.
My Account Home:
 Customer successfully logged in to his
account
 Customer is now able to access all the
account details
Access Code Validity:
ETMFA do not request for access code if customer logs out
of the account and logs in for the second time

ETMFA code is valid for 30 days (configurable) after


successful login.

ETMFA code is valid for 15 minutes (configurable) that has


been sent in email.

Maximum number of times Code can be resent is 3 times.

Customer can request 3 times to get new access code.

Generated access code is valid for only 15 minutes


(configurable) before login.
Invalid access code multiple times:

 Account will be locked when customers


enters invalid access code for 3 times.

 Note: Account will be unlocked after 24


hours

You might also like