...
...
...
...
...
...
...
Each time you log into the Armor Management Portal (AMP), you must connect via a multi-factor authentication (MFA) method. There are two MFA methods:
- Phone call
- Every time you log into AMP, you will receive a phone call. Answer the call, and follow the instructions to access AMP.
- Phone application (Okta Verify)
- Every time you log into AMP, you will receive a push notification on your phone from the application. Open the application, and then click Verify to access AMP.
Users are not required to enroll in both MFA options, but at a minimum, the phone call option is required.
...
The first time a user logs into AMP, the user will be prompted to configure their MFA. All users are required to setup the MFA phone call option. After configuring the MFA phone call option, the user can choose to optionally setup the MFA phone application (Okta Verify).
...
The required MFA phone call setup wizard will be launched.
...
Enter the phone number you want to use for your MFA phone call
...
Once the setup for the required MFA phone call is complete, you will see a screen that allows you to optionally setup the MFA phone application
...
The MFA phone application setup wizard will be launched.
...
Select the type device
...
Click next in the setup wizard
...
After the MFA configuration is complete, you should be successfully logged into the AMP portal.
...
If you have configured both the MFA options, the last MFA option that was used to successfully login to AMP with be used as the default MFA option for all subsequent AMP logins.
To change the default MFA option used (only applies if enrolled in both MFA options)
...
Click on the drop down on the MFA verification screen and select the MFA option.
...
Complete the MFA verification process
...
All MFA management (i.e. phone number change, MFA enrollment) will be done in the Armor Okta Dashboard.
...
In the Armor Management Portal (AMP), in the top, right corner, click the vertical ellipses.
...
In the drop-down menu, select Settings.
...
Click Security + Authentication.
...
From the dashboard, pull down the menu under your user name in the top right corner of the dashboard.
...
The select the Set up option next to the MFA enrollment you wish to enroll in and follow the instructions.
| Note |
|---|
You must re-enroll in the MFA phone call. If you fail to re-enroll, you will be prompted to enroll before you are able to access AMP. |
Troubleshoot MFA for a new phone device or phone number
Every time you log into the Armor Management Portal (AMP), you must connect via a multi-factor authentication (MFA) method that is specific to your phone device or phone number. As a result, if you change your phone device or phone number, you may need to perform additonal steps in order to maintain access to your AMP account.
Review the following scenarios to learn how to maintain access to your AMP account:
...
| title | If you have your current phone device and a new phone device available |
|---|
You can use these instructions if you:
...
| title | If you use the phone call method, and you have already changed your phone number |
|---|
...
- Contact Armor Support to update your phone number.
- For the United States office, call + 1 877 262 3473. For the United Kingdom office, call +44 800 500 3167.
...
| title | If you use the phone application (Microsoft Authenticator) method, and you have already changed your phone device |
|---|
You can use these instructions if you:
You can use these instructions if you:
...
Create and invite a user account
| Insert excerpt | ||||||
|---|---|---|---|---|---|---|
|
Accept and complete a user invitation
| Insert excerpt | ||||||
|---|---|---|---|---|---|---|
|
Remove a newly created / invited user from your account
You can remove a user account that is in the Invited status or Enabled status.
In the Armor Management Portal (AMP), in the left-side navigation, click Account.
Click Users.
Locate the newly created user.
Hover over the user, and then click the vertical ellipses.
Select Remove User from Account.
Click OK.
Enable or disable a user account
| Note |
|---|
A user cannot disable or enable their own user account. |
| Note |
|---|
When you disable a user, you also disable the ability to edit their roles. You cannot add or remove a disabled user's roles. |
In the Armor Management Portal (AMP), in the left-side navigation, click Account.
Click Users.
Locate and hover over the desired user.
Click the vertical ellipses.
Click Enable or Disable.
Click OK.
| Note |
|---|
A user cannot remove their own user account. |
| Note |
|---|
After you disable a user, you can then remove a user from your account.
|
Switch to another user account
If you have multiple Armor Management Portal (AMP) accounts, you can simply switch to another user account. You do not have to logout and login again to access your other accounts.
You can switch accounts while inside a specific page without being redirected to the home page. This function exists when you switch to another account that contains the same, corresponding page.
In the Armor Management Portal (AMP), in the top, right corner, click the vertical ellipses.
In the menu that appears, select the desired account. The screen will automatically refresh and load the selected account.
Update basic profile information
In the Armor Management Portal (AMP), in the top, right corner, click the vertical ellipses.
Click Settings.
Make your desired changes.
Click Update User.
...
Change your password
To create a secure login for your account, Armor recommends that you use a passphrase, and not a password.
...
| Note |
|---|
When you create and change your password in AMP, consider the following statements:
|
In the Armor Management Portal (AMP), in the top, right corner, click the vertical ellipses.
In the drop-down menu, select Settings.
Click Security + Authentication.
Click the Armor Okta Dashboard link. This will open the Armor Okta Dashboard in a new tab in your web browser.
From the dashboard, pull down the menu under your user name in the top right corner of the dashboard.
Select the Settings option.
Select the green Edit Profile button and verify your credentials and MFA to enable the editing of the account settings.
Scroll the page to the Change Password section.
The password requirements are displayed on the screen in the Change Password section
Enter your current password and the new password and click Change Password
You will then be required to enter your current password and click Verify
You will then be asked to verify your MFA which is required to complete the changing of your password
Once verified, your password has been changed
...
Reset a forgotten password
| Note |
|---|
You can only change your password once every 24 hours. |
| Note |
|---|
You can reset your password via email. |
Reset a password via email
On the login page, click Need additional help?
Click Forgot Password?
Enter the email address associated with your user account, and then click Reset via Email.
Click the Reset Password link in the email.
Enter a new password; re-enter the password to confirm, and then click Reset Password.
You will receive an error message if:
Your passwords do not match.
Your password does not meet the password requirements.
Your password was changed less than 24 hours ago.
Your password was recently used. (You cannot use any of your previous 24 passwords.)
After you reset your password, your screen will refresh to the Armor Okta Dashboard.
To access the AMP Portal, Click on the AMP icon on the dashboard
A new tab will open and prompt you for MFA verification.
After successful validation you will be navigated to the Armor Management Portal (AMP).
...
Configure Multi-Factor Authentication (MFA) for your account
Each time you log into the Armor Management Portal (AMP), you must connect via a multi-factor authentication (MFA) method. There are two MFA methods:
Phone call
Every time you log into AMP, you will receive a phone call. Answer the call, and follow the instructions to access AMP.
Phone application (Okta Verify)
Every time you log into AMP, you will receive a push notification on your phone from the application. Open the application, and then click Verify to access AMP.
Users are not required to enroll in both MFA options, but at a minimum, the phone call option is required.
Configure MFA For New User
The first time a user logs into AMP, the user will be prompted to configure their MFA. All users are required to setup the MFA phone call option. After configuring the MFA phone call option, the user can choose to optionally setup the MFA phone application (Okta Verify).
Navigate to https://amp.armor.com and enter your credentials
The required MFA phone call setup wizard will be launched.
Enter the phone number you want to use for your MFA phone call
Click the Call button
When your phone rings, a 5 digit code will be read to you and you will enter the 5 digit code into the Verify box on the screen.
Once the setup for the required MFA phone call is complete, you will see a screen that allows you to optionally setup the MFA phone application
To setup the optional MFA phone application, click the Set up link
The MFA phone application setup wizard will be launched.
Select the type device
In your phone device, download the application called Okta Verify and open the Okta Verify app.
Click next in the setup wizard
In the Okta Verify app click Add Account and choose Organization. You will be prompted to scan the QR code in the setup wizard with the app on your phone.
After the MFA configuration is complete, you should be successfully logged into the AMP portal.
Change MFA Method Used For AMP MFA
If you have configured both the MFA options, the last MFA option that was used to successfully login to AMP with be used as the default MFA option for all subsequent AMP logins.
To change the default MFA option used (only applies if enrolled in both MFA options)
Navigate to https://amp.armor.com and enter your credentials
Click on the drop down on the MFA verification screen and select the MFA option.
Complete the MFA verification process
MFA Management
All MFA management (i.e. phone number change, MFA enrollment) will be done in the Armor Okta Dashboard.
In the Armor Management Portal (AMP), in the top, right corner, click the vertical ellipses.
In the drop-down menu, select Settings.
Click Security + Authentication.
Click the Armor Okta Dashboard link. This will open the Armor Okta Dashboard in a new tab in your web browser.
From the dashboard, pull down the menu under your user name in the top right corner of the dashboard.
Select the Settings option.
Select the green Edit Profile button and verify your credentials and MFA to enable the editing of the account settings.
Scroll the page to the Extra Verification section. You should see a Remove option on the MFA options you are currently enrolled in and a Set up option for those you are not enrolled in.
To change your phone number or MFA enrollment, select to Remove any options that you are currently enrolled in.
The select the Set up option next to the MFA enrollment you wish to enroll in and follow the instructions.
Note You must re-enroll in the MFA phone call. If you fail to re-enroll, you will be prompted to enroll before you are able to access AMP.
Troubleshoot MFA for a new phone device or phone number
Every time you log into the Armor Management Portal (AMP), you must connect via a multi-factor authentication (MFA) method that is specific to your phone device or phone number. As a result, if you change your phone device or phone number, you may need to perform additonal steps in order to maintain access to your AMP account.
Review the following scenarios to learn how to maintain access to your AMP account:
| Expand | ||
|---|---|---|
| ||
You can use these instructions if you:
Follow the instructions listed in theMFA Managementsection, then follow the instructions listed underConfigure MFA For New User. |
| Expand | ||
|---|---|---|
| ||
Please call support. Armor will perform a forced reset on your MFA enrollment. Your MFA enrollment will be removed and you will re-enroll in MFA using the configuration steps listed in theConfigure MFA For New User section.
|
| Expand | ||
|---|---|---|
| ||
You can use these instructions if you:
|
...
Roles and Permissions
Create a role and add permissions
...
Assign a role to an existing user account
In the Armor Management Portal (AMP), in the left-side navigation, click Account.
Click Roles + Permissions.
Locate and select the desired role.
In the top menu, click Members.
In the field, enter and select the desired user.
The change will be automatically saved.
The user will have immediate access to the permissions within the role.
(Optional) To remove a user, hover over the desired user, click the trash icon, and then click Remove user access.
...
Configure notification preferences
Armor recommends that you configure your account to receive notifications for Account, Billing, and Technical events.
| Info |
|---|
These notification preferences do not relate to support tickets. To update your notification preferences for support tickets, see Support Tickets. |
Account | You will receive a notification when:
| ||
Billing | You will receive a notification when:
| ||
Technical | You will receive a notification when:
|
|
You can only change the notification preferences for your own account. You cannot change the notification preferences for other user accounts.
In the Armor Management Portal (AMP), in the top, right corner, click the vertical ellipses.
Click Settings.
Click Notification Preferences.
Use the slider to make your desired changes.
Select Email to receive notifications through email.
Click Update Notification Preference to save your changes.
The above notifications preference types are not available unless the user is assigned one of the following permissions:
AccountBillingTechnical
Read Identity
Update Personal Identity
Write Identity
Update Payment Information
View Invoices
Read Product Catalog
View Subscriptions
Write Subscriptions
Read Workload(s)
Write Workload
Read Virtual Machine(s)
Write Virtual Machine
...