Create and invite a user account
In the Armor Management Portal (AMP), in the left-side navigation, click Account.
Click Users.
Click the plus ( + ) icon.
Complete the First Name, Last Name, and Email Address fields.
The email address you enter will be the username.
Select a role for this user.
You must assign a role to the user.
You can assign multiple roles to the user.
You can assign a default role (Admin, Technical, billing).
Admin contains every permission in AMP.
Technical contains mostly write-only permissions.
Billing contains mostly read-only permissions
To learn about Roles and Permissions, see Roles and Permissions.
Click Create User. An email will be sent to the user. After 96 hours, the sign-up link in the email will expire.
If the link expires, you can resend the user invitation. In the Users screen, hover over the desired user, click the vertical ellipsis, and then select Resend Invitation.
If you want to remove this newly created/invited user from your account, see Remove a newly created / invited user from your account.
Accept and complete a user invitation
...
Note your Armor username.
The Username will be pre-populated with the email address of the Primary Contact for the account.
In Password and Confirm Password, create and enter an account password.
Your password must be at least 14 characters in length.
Your password must contain an upper-case character, a lower-case character, a number, and a special character.
Your password cannot contain personal information, such as your name, email address, birthday, etc. For example, if your name is John Smith, then you cannot use joh or smi in your password.
You can only change your password once every 24 hours.
Passwords expire after 60 days.
After 6 failed login attempts, you will be locked out of your account for an hour. To resolve this, you must contact your account administrator or contact Armor Support.
After 15 minutes of no activity, you will be logged out of the Armor Management Portal (AMP).
Complete the Challenge Phrase and Challenge Response.
If you call Armor for technical support, you will be asked the Challenge Phrase, and you must correctly answer the Challenge Response.
Do not use inappropriate language or suggestive material.
The answer must be at least five characters long.
In Phone Number, select your country code / flag, and then enter your phone number.
This phone number will be used for multi-factor authentication (MFA). Every time you log into the Armor Management Portal (AMP), you will receive a phone call in order to complete the login process.
You can enter a phone number with spaces and special characters, such as (555) 555-555.
(Optional) If your phone number contains an extension, enter the number in Extension. You cannot include spaces or special characters in this field.
Click Continue.
...
Note |
---|
When you create and change your password in AMP, consider the following statements:
|
...
Phone call
Every time you log into AMP, you will receive a phone call. Answer the call, and follow the instructions to access AMP.
Phone application (Okta Verify)
Every time you log into AMP, you will receive a push notification on your phone from the application. Open the application, and then click Verify to access AMP.
Users are not required to enroll in both MFA options, but at a minimum, the phone call option is required.
Configure MFA For New User
...
In the Armor Management Portal (AMP), in the top, right corner, click the vertical ellipses.
In the drop-down menu, select Settings.
Click Security + Authentication.
Click the Armor Okta Dashboard link. This will open the Armor Okta Dashboard in a new tab in your web browser.
From the dashboard, pull down the menu under your user name in the top right corner of the dashboard.
Select the Settings option.
Select the green Edit Profile button and verify your credentials and MFA to enable the editing of the account settings.
Scroll the page to the Extra Verification section. You should see a Remove option on the MFA options you are currently enrolled in and a Set up option for those you are not enrolled in.
To change your phone number or MFA enrollment, select to Remove any options that you are currently enrolled in.
The select the Set up option next to the MFA enrollment you wish to enroll in and follow the instructions.
Note You must re-enroll in the MFA phone call. If you fail to re-enroll, you will be prompted to enroll before you are able to access AMP.
Troubleshoot MFA for a new phone device or phone number
...
Expand | ||
---|---|---|
| ||
Please call support. Armor will perform a forced reset on your MFA enrollment. Your MFA enrollment will be removed and you will re-enroll in MFA using the configuration steps listed in the Configure MFA For New User section.
|
...
Read Identity
Update Personal Identity
Write Identity
Update Payment Information
View Invoices
Read Product Catalog
View Subscriptions
Write Subscriptions
Read Workload(s)
Write Workload
Read Virtual Machine(s)
Write Virtual Machine
...