User Accounts

Configure Multi-Factor Authentication (MFA) for your account

Each time you log into the Armor Management Portal (AMP), you must connect via a multi-factor authentication (MFA) method. There are two MFA methods:

• Phone call
  • Every time you log into AMP, you will receive a phone call. Answer the call, and follow the instructions to access AMP.
• Phone application (Okta Verify)
  • Every time you log into AMP, you will receive a push notification on your phone from the application. Open the application, and then click Verify to access AMP.

Users are not required to enroll in both MFA options, but at a minimum, the phone call option is required.

Configure MFA For New User

The first time a user logs into AMP, the user will be prompted to configure their MFA. All users are required to setup the MFA phone call option. After configuring the MFA phone call option, the user can choose to optionally setup the MFA phone application (Okta Verify).

1. Navigate to https://amp.armor.com and enter your credentials

2. The required MFA phone call setup wizard will be launched.

3. Enter the phone number you want to use for your MFA phone call

4. Click the Call button

5. When your phone rings, a 5 digit code will be read to you and you will enter the 5 digit code into the Verify box on the screen.

6. Once the setup for the required MFA phone call is complete, you will see a screen that allows you to optionally setup the MFA phone application

7. To setup the optional MFA phone application, click the Set up link

8. The MFA phone application setup wizard will be launched.

9. Select the type device

10. In your phone device, download the application called Okta Verify and open the Okta Verify app.

11. Click next in the setup wizard

12. In the Okta Verify app click Add Account and choose Organization. You will be prompted to scan the QR code in the setup wizard with the app on your phone.

13. After the MFA configuration is complete, you should be successfully logged into the AMP portal.

Change MFA Method Used For AMP MFA

If you have configured both the MFA options, the last MFA option that was used to successfully login to AMP with be used as the default MFA option for all subsequent AMP logins.

To change the default MFA option used (only applies if enrolled in both MFA options)

1. Navigate to https://amp.armor.com and enter your credentials

2. Click on the drop down on the MFA verification screen and select the MFA option.

3. Complete the MFA verification process

MFA Management

All MFA management (i.e. phone number change, MFA enrollment) will be done in the Armor Okta Dashboard.

1. In the Armor Management Portal (AMP), in the top, right corner, click the vertical ellipses.

2. In the drop-down menu, select Settings.

3. Click Security + Authentication.

4. Click the Armor Okta Dashboard link. This will open the Armor Okta Dashboard in a new tab in your web browser.

5. From the dashboard, pull down the menu under your user name in the top right corner of the dashboard.

6. Select the Settings option.

7. Select the green Edit Profile button and verify your credentials and MFA to enable the editing of the account settings.

8. Scroll the page to the Extra Verification section. You should see a Remove option on the MFA options you are currently enrolled in and a Set up option for those you are not enrolled in.

9. To change your phone number or MFA enrollment, select to Remove any options that you are currently enrolled in.

10. The select the Set up option next to the MFA enrollment you wish to enroll in and follow the instructions.

    
    

    You must re-enroll in the MFA phone call. If you fail to re-enroll, you will be prompted to enroll before you are able to access AMP.

    Troubleshoot MFA for a new phone device or phone number

    Every time you log into the Armor Management Portal (AMP), you must connect via a multi-factor authentication (MFA) method that is specific to your phone device or phone number. As a result, if you change your phone device or phone number, you may need to perform additonal steps in order to maintain access to your AMP account.

    Review the following scenarios to learn how to maintain access to your AMP account:

     If you have your current phone device and a new phone device available

    You can use these instructions if you:

    • Will soon switch phone devices OR
    • Have both phone devices available

    Follow the instructions listed in the MFA Management section, then follow the instructions listed under Configure MFA For New User.

     If you use the phone call method, and you have already changed your phone number

    Please call support. Armor will perform a forced reset on your MFA enrollment. Your MFA enrollment will be removed and you will re-enroll in MFA using the configuration steps listed in the Configure MFA For New User section.

    1. Contact Armor Support to update your phone number.
       • For the United States office, call + 1 877 262 3473. For the United Kingdom office, call +44 800 500 3167.
     If you use the phone application (Microsoft Authenticator) method, and you have already changed your phone device

    You can use these instructions if you:

    • You can use these instructions if you:

      • Used the phone application (Okta Verify) to access AMP AND
      • Already switched to a different phone device

      Log into AMP using the instructions in the Change MFA Method section, then use the steps listed in the MFA Management section to reconfigure verification using Okta Verify.

    
    

Create and invite a user account

Accept and complete a user invitation

Remove a newly created / invited user from your account

You can remove a user account that is in the Invited status or Enabled status.

1. In the Armor Management Portal (AMP), in the left-side navigation, click Account.
2. Click Users.
3. Locate the newly created user.
4. Hover over the user, and then click the vertical ellipses.
5. Select Remove User from Account.
6. Click OK.

Enable or disable a user account

1. In the Armor Management Portal (AMP), in the left-side navigation, click Account.
2. Click Users.
3. Locate and hover over the desired user.
4. Click the vertical ellipses.
5. Click Enable or Disable.
6. Click OK.

Switch to another user account

If you have multiple Armor Management Portal (AMP) accounts, you can simply switch to another user account. You do not have to logout and login again to access your other accounts.

You can switch accounts while inside a specific page without being redirected to the home page. This function exists when you switch to another account that contains the same, corresponding page.

1. In the Armor Management Portal (AMP), in the top, right corner, click the vertical ellipses.
2. In the menu that appears, select the desired account. The screen will automatically refresh and load the selected account.

Update basic profile information

1. In the Armor Management Portal (AMP), in the top, right corner, click the vertical ellipses.
2. Click Settings.

3. Make your desired changes.

4. Click Update User.

Change your password

To create a secure login for your account, Armor recommends that you use a passphrase, and not a password.

A passphrase is a combination of seemingly unrelated words; a password tends to be a single word, followed by numbers and special characters. To increase the strength of your passphrase, you can add numbers, special characters, and a mix of upper-case and lower-case letters.

For example, you can enhance the passphrase armoravocadosummer to armor@vocado$uMM3er.

1. In the Armor Management Portal (AMP), in the top, right corner, click the vertical ellipses.

2. In the drop-down menu, select Settings.

3. Click Security + Authentication.

4. Click the Armor Okta Dashboard link. This will open the Armor Okta Dashboard in a new tab in your web browser.

5. From the dashboard, pull down the menu under your user name in the top right corner of the dashboard.

6. Select the Settings option.

7. Select the green Edit Profile button and verify your credentials and MFA to enable the editing of the account settings.

8. Scroll the page to the Change Password section.

   1. The password requirements are displayed on the screen in the Change Password section

9. Enter your current password and the new password and click Change Password

10. You will then be required to enter your current password and click Verify

11. You will then be asked to verify your MFA which is required to complete the changing of your password

12. Once verified, your password has been changed

Reset a forgotten password

Reset a password via email

1. On the login page, click Need additional help?

2. Click Forgot Password?

3. Enter the email address associated with your user account, and then click Reset via Email.

4. Click the Reset Password link in the email.

5. Enter a new password; re-enter the password to confirm, and then click Reset Password.

   • You will receive an error message if:

     • Your passwords do not match.

     • Your password does not meet the password requirements.

     • Your password was changed less than 24 hours ago.

     • Your password was recently used. (You cannot use any of your previous 24 passwords.)

6. After you reset your password, your screen will refresh to the Armor Okta Dashboard.

7. To access the AMP Portal, Click on the AMP icon on the dashboard

8. A new tab will open and prompt you for MFA verification.

9. After successful validation you will be navigated to the Armor Management Portal (AMP).

Roles and Permissions

Create a role and add permissions

Assign a role to an existing user account

1. In the Armor Management Portal (AMP), in the left-side navigation, click Account.
2. Click Roles + Permissions.
3. Locate and select the desired role.
4. In the top menu, click Members.
5. In the field, enter and select the desired user.
   • The change will be automatically saved.
   • The user will have immediate access to the permissions within the role.
6. (Optional) To remove a user, hover over the desired user, click the trash icon, and then click Remove user access.

Configure notification preferences

Armor recommends that you configure your account to receive notifications for Account, Billing, and Technical events.

You can only change the notification preferences for your own account. You cannot change the notification preferences for other user accounts.

1. In the Armor Management Portal (AMP), in the top, right corner, click the vertical ellipses.
2. Click Settings.
3. Click Notification Preferences.
4. Use the slider to make your desired changes.
   
   • Select Email to receive notifications through email.
5. Click Update Notification Preference to save your changes.

The above notifications preference types are not available unless the user is assigned one of the following permissions:

AccountBillingTechnical

• Read Identity
• Update Personal Identity
• Write Identity

• Update Payment Information
• View Invoices
• Read Product Catalog
• View Subscriptions
• Write Subscriptions
• Read Workload(s)
• Write Workload
• Read Virtual Machine(s)
• Write Virtual Machine

Topics Discussed

• Configure Multi-Factor Authentication (MFA) for your account
• Create and invite a user account
• Enable or disable a user account
• Accept and complete a user invitation
• Remove a newly created/invited user from your account
• Switch to another user account
• Change or reset your password
• Roles and Permissions
• Configure notification preferences