User Accounts

Create and invite a user account

1. In the Armor Management Portal (AMP), in the left-side navigation, click Account.

2. Click Users.

3. Click the plus ( + ) icon.

4. Complete the First Name, Last Name, and Email Address fields.

   • The email address you enter will be the username.

5. Select a role for this user.

   • You must assign a role to the user.

   • You can assign multiple roles to the user.

   • You can assign a default role (Admin, Technical, billing).

     • Admin contains every permission in AMP.

     • Technical contains mostly write-only permissions.

     • Billing contains mostly read-only permissions

   • To learn about Roles and Permissions, see Roles and Permissions.

6. Click Create User. An email will be sent to the user. After 96 hours, the sign-up link in the email will expire.

   • If the link expires, you can resend the user invitation. In the Users screen, hover over the desired user, click the vertical ellipsis, and then select Resend Invitation.

   • If you want to remove this newly created/invited user from your account, see Remove a newly created / invited user from your account.

Accept and complete a user invitation

Step 1: Open the Account Signup Email

1. In the email from Armor, click the link.

   • You will be redirect to enter your account security information, including payment information.

     • If you already coordinated your payment process with Armor, then you will not see the payment screen.

Step 2: Complete Your Security Information

1. Note your Armor username.

   • The Username will be pre-populated with the email address of the Primary Contact for the account.

2. In Password and Confirm Password, create and enter an account password.

   • Your password must be at least 14 characters in length.

   • Your password must contain an upper-case character, a lower-case character, a number, and a special character.

   • Your password cannot contain personal information, such as your name, email address, birthday, etc. For example, if your name is John Smith, then you cannot use joh or smi in your password.

   • You can only change your password once every 24 hours.

   • Passwords expire after 60 days. 

   • After 6 failed login attempts, you will be locked out of your account for an hour. To resolve this, you must contact your account administrator or contact Armor Support.

   • After 15 minutes of no activity, you will be logged out of the Armor Management Portal (AMP).

3. Complete the Challenge Phrase and Challenge Response. 

   • If you call Armor for technical support, you will be asked the Challenge Phrase, and you must correctly answer the Challenge Response. 

   • Do not use inappropriate language or suggestive material. 

   • The answer must be at least five characters long. 

4. In Phone Number, select your country code / flag, and then enter your phone number.

   • This phone number will be used for multi-factor authentication (MFA). Every time you log into the Armor Management Portal (AMP), you will receive a phone call in order to complete the login process.

   • You can enter a phone number with spaces and special characters, such as (555) 555-555. 

   • (Optional) If your phone number contains an extension, enter the number in Extension. You cannot include spaces or special characters in this field.

5. Click Continue.

Remove a newly created / invited user from your account

You can remove a user account that is in the Invited status or Enabled status.

1. In the Armor Management Portal (AMP), in the left-side navigation, click Account.

2. Click Users.

3. Locate the newly created user.

4. Hover over the user, and then click the vertical ellipses.

5. Select Remove User from Account.

6. Click OK.

Enable or disable a user account

1. In the Armor Management Portal (AMP), in the left-side navigation, click Account.

2. Click Users.

3. Locate and hover over the desired user.

4. Click the vertical ellipses.

5. Click Enable or Disable.

6. Click OK.

Switch to another user account

If you have multiple Armor Management Portal (AMP) accounts, you can simply switch to another user account. You do not have to logout and login again to access your other accounts.

You can switch accounts while inside a specific page without being redirected to the home page. This function exists when you switch to another account that contains the same, corresponding page.

1. In the Armor Management Portal (AMP), in the top, right corner, click the vertical ellipses.

2. In the menu that appears, select the desired account. The screen will automatically refresh and load the selected account.

Update basic profile information

1. In the Armor Management Portal (AMP), in the top, right corner, click the vertical ellipses.

2. Click Settings.

3. Make your desired changes.

4. Click Update User.

Change your password

To create a secure login for your account, Armor recommends that you use a passphrase, and not a password.

A passphrase is a combination of seemingly unrelated words; a password tends to be a single word, followed by numbers and special characters. To increase the strength of your passphrase, you can add numbers, special characters, and a mix of upper-case and lower-case letters.

For example, you can enhance the passphrase armoravocadosummer to armor@vocado$uMM3er.

1. In the Armor Management Portal (AMP), in the top, right corner, click the vertical ellipses.

2. In the drop-down menu, select Settings.

3. Click Security + Authentication.

4. Click the Armor Okta Dashboard link. This will open the Armor Okta Dashboard in a new tab in your web browser.

5. From the dashboard, pull down the menu under your user name in the top right corner of the dashboard.

6. Select the Settings option.

7. Select the green Edit Profile button and verify your credentials and MFA to enable the editing of the account settings.

8. Scroll the page to the Change Password section.

   1. The password requirements are displayed on the screen in the Change Password section

9. Enter your current password and the new password and click Change Password

10. You will then be required to enter your current password and click Verify

11. You will then be asked to verify your MFA which is required to complete the changing of your password

12. Once verified, your password has been changed

Reset a forgotten password

Reset a password via email

1. On the login page, click Need additional help?

2. Click Forgot Password?

3. Enter the email address associated with your user account, and then click Reset via Email.

4. Click the Reset Password link in the email.

5. Enter a new password; re-enter the password to confirm, and then click Reset Password.

   • You will receive an error message if:

     • Your passwords do not match.

     • Your password does not meet the password requirements.

     • Your password was changed less than 24 hours ago.

     • Your password was recently used. (You cannot use any of your previous 24 passwords.)

6. After you reset your password, your screen will refresh to the Armor Okta Dashboard.

7. To access the AMP Portal, Click on the AMP icon on the dashboard

8. A new tab will open and prompt you for MFA verification.

9. After successful validation you will be navigated to the Armor Management Portal (AMP).

Configure Multi-Factor Authentication (MFA) for your account

Each time you log into the Armor Management Portal (AMP), you must connect via a multi-factor authentication (MFA) method. There are two MFA methods:

• Phone call

  • Every time you log into AMP, you will receive a phone call. Answer the call, and follow the instructions to access AMP.

• Phone application (Okta Verify)

  • Every time you log into AMP, you will receive a push notification on your phone from the application. Open the application, and then click Verify to access AMP.

Users are not required to enroll in both MFA options, but at a minimum, the phone call option is required.

Configure MFA For New User

The first time a user logs into AMP, the user will be prompted to configure their MFA. All users are required to setup the MFA phone call option. After configuring the MFA phone call option, the user can choose to optionally setup the MFA phone application (Okta Verify).

1. Navigate to https://amp.armor.com and enter your credentials

2. The required MFA phone call setup wizard will be launched.

3. Enter the phone number you want to use for your MFA phone call

4. Click the Call button

5. When your phone rings, a 5 digit code will be read to you and you will enter the 5 digit code into the Verify box on the screen.

6. Once the setup for the required MFA phone call is complete, you will see a screen that allows you to optionally setup the MFA phone application

7. To setup the optional MFA phone application, click the Set up link

8. The MFA phone application setup wizard will be launched.

9. Select the type device

10. In your phone device, download the application called Okta Verify and open the Okta Verify app.

11. Click next in the setup wizard

12. In the Okta Verify app click Add Account and choose Organization. You will be prompted to scan the QR code in the setup wizard with the app on your phone.

13. After the MFA configuration is complete, you should be successfully logged into the AMP portal.

Change MFA Method Used For AMP MFA

If you have configured both the MFA options, the last MFA option that was used to successfully login to AMP with be used as the default MFA option for all subsequent AMP logins.

To change the default MFA option used (only applies if enrolled in both MFA options)

1. Navigate to https://amp.armor.com and enter your credentials

2. Click on the drop down on the MFA verification screen and select the MFA option.

3. Complete the MFA verification process

MFA Management

All MFA management (i.e. phone number change, MFA enrollment) will be done in the Armor Okta Dashboard.

1. In the Armor Management Portal (AMP), in the top, right corner, click the vertical ellipses.

2. In the drop-down menu, select Settings.

3. Click Security + Authentication.

4. Click the Armor Okta Dashboard link. This will open the Armor Okta Dashboard in a new tab in your web browser.

5. From the dashboard, pull down the menu under your user name in the top right corner of the dashboard.

6. Select the Settings option.

7. Select the green Edit Profile button and verify your credentials and MFA to enable the editing of the account settings.

8. Scroll the page to the Extra Verification section. You should see a Remove option on the MFA options you are currently enrolled in and a Set up option for those you are not enrolled in.

9. To change your phone number or MFA enrollment, select to Remove any options that you are currently enrolled in.

10. The select the Set up option next to the MFA enrollment you wish to enroll in and follow the instructions.

    You must re-enroll in the MFA phone call. If you fail to re-enroll, you will be prompted to enroll before you are able to access AMP.

Troubleshoot MFA for a new phone device or phone number

Every time you log into the Armor Management Portal (AMP), you must connect via a multi-factor authentication (MFA) method that is specific to your phone device or phone number. As a result, if you change your phone device or phone number, you may need to perform additonal steps in order to maintain access to your AMP account.

Review the following scenarios to learn how to maintain access to your AMP account:

Roles and Permissions

Create a role and add permissions

1. In the Armor Management Portal (AMP), in the left-side navigation, click Account. 

2. Click Roles + Permissions. 

3. Click the plus ( + ) icon. 

4. In the top, right corner of the screen, hover over the gear icon. 

5. Click the blue pencil (Rename) icon.

6. In the window that appears, enter a descriptive name, and then click Rename Role.

7. In the top menu, click Members. 

8. In the field, enter and select the user (or users) to assign to the role. 

9. In the top menu, click Permissions. 

10. Mark the permissions to add to your role. 

11. At the bottom of the screen, click Save Role. 

Assign a role to an existing user account

1. In the Armor Management Portal (AMP), in the left-side navigation, click Account.

2. Click Roles + Permissions.

3. Locate and select the desired role.

4. In the top menu, click Members.

5. In the field, enter and select the desired user.

   • The change will be automatically saved.

   • The user will have immediate access to the permissions within the role.

6. (Optional) To remove a user, hover over the desired user, click the trash icon, and then click Remove user access.

Configure notification preferences

Armor recommends that you configure your account to receive notifications for Account, Billing, and Technical events.

You can only change the notification preferences for your own account. You cannot change the notification preferences for other user accounts.

1. In the Armor Management Portal (AMP), in the top, right corner, click the vertical ellipses.

2. Click Settings.

3. Click Notification Preferences.

4. Use the slider to make your desired changes.

   • Select Email to receive notifications through email.

5. Click Update Notification Preference to save your changes.

The above notifications preference types are not available unless the user is assigned one of the following permissions:

AccountBillingTechnical

• Read Identity

• Update Personal Identity

• Write Identity

• Update Payment Information

• View Invoices

• Read Product Catalog

• View Subscriptions

• Write Subscriptions

• Read Workload(s)

• Write Workload

• Read Virtual Machine(s)

• Write Virtual Machine

Topics Discussed

• Configure Multi-Factor Authentication (MFA) for your account

• Create and invite a user account

• Enable or disable a user account

• Accept and complete a user invitation

• Remove a newly created/invited user from your account

• Switch to another user account

• Change or reset your password

• Roles and Permissions

• Configure notification preferences