U.S. Department of Agriculture eGovernment Program eAuthentication Initiative eAuthentication Solution Screens Review Meeting October 7, 2003

U.S. Department of Agriculture eGovernment Program Agenda  Customer Registration Process  Customer Registration - Level 1  Customer Registration - Level 2  Local Registration Authority (LRA) Role Assignment  Delegated Authorization Administration  Questions and Answers

U.S. Department of Agriculture eGovernment Program USDA’s eAuthentication Home Page COMING SOON!

U.S. Department of Agriculture eGovernment Program Customer options for online self-registration: Option 1 – The customer applies for just Level 1 credentials Requires limited amount of information to complete customer profile Requires a minimum 4 character password Grants limited access, no identity-proofing required Receives an confirmation with request to activate customer profile with Level 1 credentials Option 2 – The customer currently has Level 1 credentials and decides to complete the process to apply for Level 2 credentials Requires additional customer information Requires password change to minimum 9 characters Requires authentication of identity by USDA employee – Local Registration Authority (LRA) Receive confirmation Option 3 – The customer applies for Level 2 credentials without having Level 1 credentials Requires Customer to complete an expanded User Profile Requires a minimum 9 character password Requires authentication of identity by USDA employee - LRA Receives an confirmation without request to activate customer profile with Level 2 credentials Customer Registration Process

U.S. Department of Agriculture eGovernment Program Process Flow- Level 1 Assurance Obtain User ID and Level 1 credential Customer Creates a User Profile and clicks the “Submit” button Access Level 1 Web applications

U.S. Department of Agriculture eGovernment Program Customer Regisitration – Level 1

U.S. Department of Agriculture eGovernment Program Process Flow- Level 2 Assurance Customer Creates User Profile and clicks “Submit” LRA verifies customer’s identity and updates the system Access Level 2 Applications Customer presents valid government issued ID to LRA LRA verifies ID information against customer profile in the system LRA updates customer profile in the system and activates level 2 credentials

U.S. Department of Agriculture eGovernment Program

Customer Registration Key Points is a required field in this registration process. The customer will be advised to establish accounts from companies like Yahoo, Hotmail, or their local Internet Service Provide (ISP) if they do not already have an established account elsewhere. The customer will receive an error message if all of the required fields are not completed and the system will not accept the user profile. Once the customer completes and submits their user profile online, the customer will receive a verification . This verification will provide the customer with log on instructions that will activate their access level

U.S. Department of Agriculture eGovernment Program Process Flow - LRA Processing The LRA is responsible for completing the following 3 steps The LRA searches for the customer’s name in the USDA eAuthentication website The LRA validates the customer’s user profile against the customer’s government issued photo ID The LRA activates the customer’s Level 2 credential

U.S. Department of Agriculture eGovernment Program Local Registration Authority Process – Step 1 Search 1.Go to USDA eAuthentication web site to access the application to activate a customer to Level 2 2.Click on the “My Task” tab to access the My Task for extUsers screen 3.Click on the task “Validate Level 2 Customer” Click on “Validate Level 2 Customer” to access search page **This site is protected by WebCAAF - All federal employees wishing to be LRA’s must have WebCAAF ID and password

U.S. Department of Agriculture eGovernment Program Local Authority Registration Process– Step 1 4.The Validate Level 2 Customer: Search for Level 2 Customer page is displayed 5.Select “Last Name” from the Search Option drop down menu (Last Name is the default) 6.Select “Equals” from the drop down menu to specify the relationship you wish to search (Equals is the default) 7.Enter the customer’s last name using the valid form of identification that is presented 8.Click the “Add More” button to display additional search criteria (i.e. First Name, User ID, State) 9.Select “First Name” from the second Search drop down menu 10.Select “Equals” from the drop down menu to specify the relationship you wish to search 11.Enter the customer’s first name using the valid form of identification that is presented 12.Click “Search” The drop down menu allows the LRA to manipulate the search criteria

U.S. Department of Agriculture eGovernment Program Local Registration Authority Process – Step 1 DHawes1DanaHawes50 Fruitwood.Cleveland If the LRA entered the incorrect customer information, the Search Again button will take the LRA back to the previous screen 11. Search results are displayed on the Validate Level 2 Customer: Search for Level 2 Customer 12. If the information in the search results matches the information specified on the customer’s identification card, click on the customer’s “User ID” listed on the search results page to bring up the Customer Profile Note: If search results display more than one entry with the same name, further confirmation will be required to validate the customer’s identity. The LRA should confirm one or more of the following: (a) Date of Birth, (b) User ID, and/or (c) Address/State. The LRA must select each customer one by one until the correct customer is selected

U.S. Department of Agriculture eGovernment Program Local Registration Authority Process – Step 2 13.Compare the customer’s first and last name on the government issued photo identification card to the information listed in the customer’s profile Note: If the information in the profile does not match the information provided on the identification card, advise the customer to correct their User Profile, or obtain an updated identification card and then return to the Service Center to complete the eAuthentication Registration Process 14.Validate the customer’s physical attributes and resemblance to the government issued photo ID that is presented 15.On the Credential Documentation Type pull-down menu, select the appropriate form of government issued identification presented by the customer (Driver’s license is the default ID) Validate The LRA’s WebCAAF ID will automatically populate in the LRA Admin field

U.S. Department of Agriculture eGovernment Program Local Registration Authority Process – Step Enter the expiration date that is shown on the government issued photo ID that is presented in the “Credential Expiration” field 17. Click “Submit” to activate the customer to Level 2 Validate Activate Note: A Confirmation message will display once the LRA activates a customer

U.S. Department of Agriculture eGovernment Program Role Assignment Process Once level 2 credentials are activated by the LRA, the customer can now access online interactions that require Level 2 Assurance, except for … If application requires additional information before user authorization is permitted then, –Application owner determines how to collect additional information –Application owner establishes some type of delegated authorization administration –Application owner provides means for users to access delegated authorization administrator

U.S. Department of Agriculture eGovernment Program Customer Role Request Customer attempts to access a role protected application You have provided valid credentials, but are not authorized to access this page! Click below to request access to this USDA web site Click here Customer is redirected to error page (Active Response) and is guided through application defined process

U.S. Department of Agriculture eGovernment Program Role Assignment Agency Application Administrator is responsible for Role Assignment: 1.Administrator goes to IMS 2.Administrator searches for customer

U.S. Department of Agriculture eGovernment Program Role Assignment 3. Agency Application Administrator pulls up customer’s profile and then clicks on the “Specific Admin Roles” Tab

U.S. Department of Agriculture eGovernment Program Role Assignment 4.Administrator selects appropriate Role to Assign to customer 5.Administrator clicks on submit to activate the customer role 6.Administrator s the customer to invite him/her to access protected application Agency is responsible for creating the proper procedures for Role Assignments

U.S. Department of Agriculture eGovernment Program Questions and Answers