PJM Account Manager User Guide. Prepared by: Markets Applications Effective Date: March 31, 2015

Transcription

1 Prepared by: Markets Applications Effective Date: March 31, 2015

2 Table of Contents PJM User Guide: PJM Account Manager Table of Contents... 0 Introduction... 2 About This User Guide... 2 Intended Audience... 2 Section 1: PJM Account Manager Screens... 2 Access to Account Manager... 3 New User Registration... 3 User Account Management My Tools Home User Profile Account Information User Profile Account Access Reset password using Forgot Password link Account Manager (AM) User Account Management AM Pending Tasks AM - Add New User AM User Profile Profile Information AM User Profile Account Access AM My Company AM Search Page Creating a System ID Account Converting a Standard User Account into a System ID Account Single User Multi Account (SUMA) for Member Account Managers (CAM s) Overview Section 1: Steps to create new Single User Multi Account user account Section 2: Single User Multi Account CAM updating profile information... 42

3 Section 3: Single User Multi Account users managing their users accounts Single User Multi Account user - Creating new users Single User Multi Account user Pending Dashboard changes Single User Multi Account user Search changes Points to Note Account Manager Multi-factor Authentication (MFA) What is Multi-Factor Authentication (MFA) Soft Token/One-Time Password Who does MFA apply to Troubleshooting and expected errors with MFA What happens when a user clicks back on the Soft Token Page while using IE browser What happen if the user changes the URL back to Account Manager, on page expired page Clicking back on Soft Token Page while using Chrome Navigating to Account Manager while the user is logged into other applications What happens when a user navigates to other applications from the Soft Token Page How would I know if my device profile/ ed soft token has expired What happens when a user enters the wrong Soft Token Section 2: Revision History Review Approval P age

4 Introduction Welcome to the PJM User Guide for PJM Account Manager. In this Introduction, you will find the following information: o What you can expect from this PJM User Guide (see About This User Guide ). About This User Guide The PJM User Guide will provide instructions for New User Registration, User Account Management, and Account Manager (AM) Administrator User Account Management, in the PJM internet application Account Manager. PJM Account Manager is an application that allows users to register for an account and manage their account and tool access to PJM transactional tools. The User Guide for the Account Manager application consists of two sections. These sections will include the following: 1. PJM Account Manager Screens for New User Registration, User Account Management, and AM User Account Management 2. Document Revision History Intended Audience The intended audiences for the PJM Account Manager User Guide are: o o All users who require PJM tools access for conducting business with PJM Account Managers (AM) who manage the user accounts for their organization Section 1: PJM Account Manager Screens Welcome to the PJM Account Manager Screens section of the PJM User Guide. Account Manager is an information system developed by PJM as an Internet-based application. It allows users to register for an account and manage their user account and tool access to PJM transactional tools. In this section you will find the following information: o A description of how to log into the system o A description on how to register for a new account o A description on how to manage your account and tools 2 P age

5 o A description on Account Manager (AM) administration for new and existing users. Access to Account Manager Account Manager can be accessed from PJM s Account Manager Page using the following URL: Users can register for an account or sign in to their existing account from this page. Please note that Production accounts differ from Train (Sandbox) test accounts. Users who currently have legacy CAM access to both Production and Sandbox will automatically have access to the Account Manager system in both environments. Users who do not have accounts in either environment should work with their company Account Manager to provision the accounts or follow the New User Registration as outlined in the next section of this document. New User Registration In order to gain access to default tools or PJM Tools, a user must register for an account in Account Manager. The steps identified below show in detail how a user can register for a new account. A new user can register for a new account in Account Manager by navigating to the Account Manager page on pjm.com: 1. Select Register to create a new account. The screen below will prompt the user to fill out their contact information. User will also need to answer minimum of 3 security questions. These security questions are used to verify the user identity and protect their account. It will also allow the users to reset their password through the Forgot Password link for self-service capability. The answers must be between 5 50 characters. When completed, select Next 3 P age

6 2. If your company account does not exist, the Account Access page below provides an option to the user to select the checkbox to enter their company account name, which will create the account without tools access (default tool access only), or the user can select the Company for which the user is requesting tools access. Checkbox to create a user account without tool access 4 P age

7 3. If the users company account does not exist and the user selects the if your account is not in the list below checkbox and enters their company account name, and selects Next the user will receive a confirmation review page with default tools access. 4. Select Submit to complete registration. 5. The user will receive the following message once registration is complete. The user can close out of this window and expect an to set up their password. 5 P age

8 6. If the the user requires tools access, the user will select the Company for which tools access is required and select Next to continue. User is limited to one company selection. 7. The user will request the tool and level of access and select Next to continue. User may make multiple selections for tool access The right arrow button can be used to move the tool access selection over to the Selected Access accumulator section. Left arrow will remove the tool access slection from the Selected Access accumulator section. Double clicking the tool access will also move the selection over to Selected Access accumulator section. 6 P age

9 8. If the user does not require tool access for the company account selected, the I don t need tool access checkbox can be selected. If the user selects this checkbox, they will be given default tools access, but will be able to request tool access for the company they selected at registration if required in the future. 7 P age

10 9. The User will be directed to a Review Page to review the Tools Access request. This page details the default access the user will receive upon account creation (Data Miner API, My PJM Public, Member Community Public). If the user chose to request additional tools access, the tools requested will be detailed on this page. Keep in mind that the Company CAM must approve the access request before the user can obtain access to the tool. A listing of the Company CAM(s) is also detailed on this page. The user will select the Submit button to complete the account registration process, or select the Back button to make revisions. 10. The user will receive the following message once registration is complete. The user can close out of this window and expect an to set up their password ( will be sent to the address provided during account registration). 8 P age

11 11. The user will receive an with a link that will expire after 4 hours to create the account password. Please note that if the user does not create their password within the 4 hour threshold, the user will need to contact their Customer Account Manager (CAM) to request a password reset. The company CAM will also receive an that will detail the new user and pending access request. 12. When the temporary password link is selected, the user will be instructed to create a permenant password. Note: Password must be characters in legth and contain 1 uppercase letter, 1 lowercase letter, 1 number, and 1 special character (only:()!$`~:.,<>=?^_{}[] ). The password must not include the username, first or last name 9 P age

12 13. Once a valid password has been saved, the user will be redirected to the Account Manager Single Sign-On (SSO) page where the username and password will be entered to gain access to the tool. If you are a company account manager (CAM), you will be presented with a Soft Token page following the submission of a valid userid and password to submit an additional authentication parameter in order to gain access to the tool. Please refer to the Multi-Factor Authentication (MFA) section of the User Guide for additional details. User Account Management Once a user has an established user account in Account Manager, the user can manage their contact information and access to PJM Tools. The steps below show the different functions a user can perform on the My Tools Home page, Account Manager User Profile Account Information page, and the Account Manager Account Access page. My Tools Home Once the user signs-in to the Account Manager Single Sign-On (SSO) page, the user will be directed to the PJM My Tools Home page. From this page, the user can view their Account Manager User Profile by selecting the View Profile link, as well as manage Tools Access by selecting Manage my tools link on the left frame. If the user requires visibility into PJM legacy tools, the View legacy tools link can be selected, which will redirect the user to 10 P age

13 the PJM Tools Home legacy system page. The PJM My Tools Home page will display a listing of the tools the user has access to. The user will have the ability to launch the tool by selecting the Public Page or Tool links to launch the application, or select the More Information link to open up the Tool page on Also on the PJM My Tools Home page, there is a My Tools dropdown menu that provides another avenue for the user to navigate to tools, a link to and to Sign Out of the PJM My Tools Home system. 11 P age

14 User Profile Account Information 1. On the User Profile Profile Information page, the user can manage their Contact Information, and Profile Information. The user can update their job title, phone number, and address; however, the users First Name, Last Name, and Employer cannot be edited. There is a Last Name Change button the user can select to request a Last Name Change to be approved by their Account Manager (AM) administrator. Title is not a required field to be entered if you are an existing user; however, new users will be required to enter their title upon registration. 12 P age

15 2. The user can also manage their account access. The user will have the ability to change the account password by selecting the Change Password button. 3. If the user no longer requires access to PJM Tools, the user can terminate their account by selecting the checkbox next Terminate user account and selecting the Submit button on the page. 13 P age

16 4. There is a References section on the User Profile Profile Information page that the user can select links to pages displaying their Account Managers and Account History. Below is a screenshot of the Account Managers page displaying the Account Managers for my company: Below is a screenshot of the History page displaying the history of actions taken on the account (i.e. Contact Information changes, Password changes, Tool Access Requests, etc ): 14 P age

17 User Profile Account Access 1. On the User Profile Account Access page, the user can manage their Account Access. The user will have the ability to view and manage their current access in the data tables. 2. The user can edit their existing access by selecting the pencil icon next to the tool and request an Access Change Request using the dropdown menu. The user can also submit comments with the request to provide justification for the request to their account manager. 15 P age

18 3. The user can terminate tool access by selecting the trash can icon next to the tool for which the user no longer requires tool access. The user will be prompted to validate this request. 4. If the user had previously selected company account access when registering their user account, the user can make a request for additional tools access for that company by selecting the Request Access button. 16 P age

19 5. The user will be directed to the Request Access page, where the user can select the tool and level of access. Once additional tool access is selected, the user will select the Next button to continue. 6. When the user proceeds with requesting additional tools access, the user will receive a Request Access Review page that the user will need to select the Submit button to confirm the request or select the Back back button to adjust the request. 17 P age

20 7. The user will receive a success message upon submitting the request, and will be pending their Account Manager administrator s approval. Reset password using Forgot Password link User may request to reset their account password by selecting the Forgot Password link on the Sign in page. To enable the self-service password reset feature, the user must have security questions and answers saved when the user registered the account. If the user account was created prior to this feature becoming mandatory during account registration, the user can set their security questions/answers on the User Profile>Profile Information page in the Account Manager tool to enable self-service password reset capability. Steps to reset the password: 1. Click on Forgot Password 18 P age

21 2. Enter the username and click on submit 3. Enter the correct answers to the two security questions and click on submit answers. 4. User will get the below message if the security questions answered were correct. 19 P age

22 5. Check the for resetting the password. Click on the link in the to reset. 6. After clicking on the link from the user will see this screen. Enter a new password for the account and click on save. 20 P age

23 7. User will get an confirmation for the password change. User should be able to login now using the new password. Account Manager (AM) User Account Management An Account Manager (AM) is a user who has been identified through submission of CAM Form (B) to manage the user accounts for their company. CAM users are responsible for provisioning new user accounts, account access requests, and user requests (user profile) to users belonging to their company. The steps below show the different functions an Account Manager administrative user can perform to manage user accounts for their company. AM Pending Tasks The Pending Tasks dashboard page is divided into two sub-tabs (User Access Requests and User Requests). Upon logging in to the Account Manager tool, the Account Manager will land on Pending Tasks > User Access Requests page. Below specifies the types of requests on both the Pending Tasks > User Access Request and User Requests pages: 1. The Pending Task > User Access Requests page contains a list of user tool access requests pending Account Manager Management (approval, denial, edit). All user access requests will be displayed separately on the page, and will not be bundled into a single request for the user. 21 P age

24 2. The Pending Task > User Requests page contains a list of user requests (Last name change) pending Account Manager Management (approval, denial, edit). All user requests will be displayed separately on the page, and will not be bundled into a single request for the user. 3. To review the request click on the pencil icon under the Actions columns. 1. Approve request- clicking on the checkbox will approve the user s request. Also the AM can click on Approve All button if they would like to approve the entire request 2. Decline request the AM can decline a request by clicking on the X icon. When the AM clicks on the decline icon, a pop up box appears where the AM can enter in a comment on why the request was declined. Also, an AM can click on Decline All button if they would like to decline the entire request. 22 P age

25 3. Modify request the AM has the ability to modify the user s request and can change their requested role. 4. For all requests (Approval, Decline, or Modification), an will be sent to the user s address to notify the user that the request was provisioned by the account manager. 23 P age

26 AM - Add New User 1. An account manager can add a new user one at a time or by uploading multiple users via CSV file. Add New User page o Click on the Add New User tab: o Fill out all of the required information. The AM is only allowed to select the company for which they are the approved AM. o Note: There is a System ID checkbox under the User Information section of the page that allows the company account manager to designate the new account as a System ID for browserless activity within PJM tools. The System ID checkbox should be left unchecked if you require a standard user account for access to PJM Tools User Interfaces (UI). 2. Click on Next to select Tool and level of access. 24 P age

27 3. Once all access is selected click on the Submit button. 4. User will receive an containing their Company Longname and Company Shortname stating that their account was successfully created with a link to set their password. Please note that the link to reset the password expires after 4 hours. This is a security feature to help prevent other users or automated systems to gain access to a user account. Usernames are not provided in this for security purposes. 5. Once the user selects the link to create their password, the user will submit the new password, and generate a notification that is sent to the user and Company Account Manager(s). This will contain the user s Company Longname, Company Shortname, Username, First name, Last name, Address, and Phone Number: 6. Add Multiple Users AM is able to upload multiple users at a one time by clicking on the Import Users button. 25 P age

28 7. Click on Choose File Note: A sample of the CSV file can be found by clicking on the Example Document link Upload the file When the file is uploaded all validations are performed, so if there is a failure with any of the records the entire file is not uploaded. When file is successfully uploaded user receives a Success message. 8. Click on Close. When Import Users pop window is closed the user is navigated to the Imported Users page. 9. AM is able to perform 2 Actions: Trash Icon will delete the selected record Edit will allow the AM to select company and tool access for user. 26 P age

29 o o Edit button opens the Add New User page with the all of the User Information populated (except Employer). Select Account and click on Next 10. Select Tool and level of access for user. 11. Once all access is selected click on the Submit button. 12. User will receive an containing their Company Longname and Company Shortname stating that their account was successfully created with a link to set their password. 27 P age

30 Please note that the link to reset the password expires after 4 hours. This is a security feature to help prevent other users or automated systems to gain access to a user account. Usernames are not provided in this for security purposes as well. 13. Once the user selects the link to create their password, the user will submit the new password, and generate a notification that is sent to the user and Company Account Manager(s). This will contain the user s Company Longname, Company Shortname, Username, First name, Last name, Address, and Phone Number: AM User Profile Profile Information 1. On the User Profile Profile Information page, the AM can manage their Contact Information, and Profile Information. The AM can update their job title, phone number, and address; however, the users First Name, Last Name, and Employer cannot be edited. There is a Last Name Change button the account manager can select to request a Last Name Change to be approved by the PJM Account Manager Administrators. 2. The AM can also manage their account information. The AM will have the ability to change the account password by selecting the Change Password button. 28 P age

31 3. If the AM no longer requires access to PJM Tools, the user can terminate their account by selecting the checkbox next Terminate user account and selecting the Submit button on the page. 4. There is a References section on the User Profile Profile Information page that the AM can select links to pages displaying Account Managers and Account History. Below is a screenshot of the Account Managers page displaying the Account Managers for your company: 29 P age

32 Below is a screenshot of the History page displaying the history of actions taken on the account (i.e. Contact Information changes, Password changes, Tool Access Requests, etc ): AM User Profile Account Access 1. On the AM User Profile - Account Access page, the AM can manage their tool access. The Account Manager can edit their tool access by selecting the pencil icon or terminate their tool access by selecting the trash can icon. There is a Request Access button that allows the AM to request additional PJM Tools access. All access requests made by a Company Account Manager will be auto-approved, unless the the request was made for Account Manager Read Only and Account Manager Read/Write which requires approval by PJM Account Manager Administrators. 30 P age

33 AM My Company 1. On the My Company - Access page, the Account Manager can view their Company Account information and current Company Account Application Privileges. The Account Manager will only see the company for which they are the Account Manager administrator. 2. On this page, the Account Manager can request additional account level tool access by selecting the Request Access button. This allows the AM to select the tool and access level which will require approval by PJM Account Manager Administrators. 31 P age

34 3. My Company - Access will also include any tools access that has been terminated. When selecting the magnifying glass icon, it will display a list of users whose tool access was terminated with the company level tool access. AM Search Page The Search page is divided into 2 sub-tabs (User Search and Access Search) to provide search criteria specific to performing a user search for account management and an access search for reporting/auditing purposes. User Search Page 1. On the User Search page, the AM administrator can perform a search utilizing criteria filters specific to user and contact information. The User Search page will be utilized primarily to perform user account management (Password Reset, Account Lock/Unlock, Edit User Profile, and Terminate Account). 32 P age

35 2. There is a Tips for using the search filters link directly below the User Search and Access Search tabs that provides a number of useful tips for using wildcards and case sensitivity when utilizing the User search filters within the data table. 3. The User Search Criteria defaults Active Users Only dropdown to Active to allow for searching on all users who have active accounts associated with your company. You can change the dropdown filter to Show All, which includes active and inactive users, as well as Inactive Only to only show inactive users. The AM must filter on at least one search criteria within the data table to return search results. 33 P age

36 When navigating away from the User Search page, user search criteria filters and results will remain upon returning to the page. User Search results will contain a System ID column that will identify the account as a System ID account ( True ) or as a standard user account ( False ). When the AM submits a successful user search, they can manage the user account from the Search Results section on the page: a. Actions from User Search Results: i. Reset password is identified by the key icon. By selecting this icon, the AM is resetting the users password. The user will receive an with a link to create a new password. The link will expire after 4 hours. The AM will also receive an indicating the password was reset. ii. Lock a user account identified by selecting the unlock icon, or Unlock the user account by selecting the lock icon. The user and Account Managers will receive an when the Account Manager takes action to lock and unlock a user account. iii. Edit the users profile by selecting the pencil icon. This directs the Account Manager to the user profile of the user account they selected to make edits to their contact information and account access. iv. Terminating a user account is identified by selecting the trashcan icon. Selecting this icon will allow the Account Manager to terminate a user account and tool access directly from the User Search page. Upon selecting the trashcan icon, the Account Manager will be prompted with a validation message to ensure they wish to proceed with the terminating the user account (Yes Terminates the user account / No User account is not terminated): 34 P age

37 v. There is a CSV icon above the search results data table on the right that will allow the AM to download the search results into a.csv file The.csv file will contain the results returned from the query generated from the User Search filters Access Search Page 1. On the Access Search page, the AM administrator can perform a search utilizing criteria filters specific to Tool and Access information to be utilized primarily for reporting on your company s user tool access. 4. There is a Tips for using the search filters link directly below the User Search and Access Search tabs that provides a number of useful tips for using wildcards and case sensitivity when utilizing the User search filters within the data table. 35 P age

38 2. The Access Search Criteria defaults Active Users Only and Active Access Only to Active to allow for searching on all users who have active accounts and tools associated with your company. You can change Active Users Only dropdown and Active Accesses Only dropdown filters to Show All, which includes active and inactive users, as well as active and inactive tool access. You can also filter on Inactive Only to only show inactive users and tool access. The AM must filter on at least one search criteria to return search results. When navigating away from the Access Search page, access search criteria filters and results will remain upon returning to the page. 36 Page

39 When the AM submits a successful access search, they can view and manage the tool access for users for their company from the Search Results section on the page: i. Edit the users profile by selecting the pencil icon. This directs the Account Manager to the user profile of the user account they selected to make edits to their contact information and account access. ii. There is a CSV icon above the search results data table on the right that will allow the AM to download the search results into a.csv file The.csv file will return user company and contact information, as well as tool access information for reporting and auditing needs. Creating a System ID Account System ID accounts will be utilized to submit data requests to PJM s application program interface (API). The credentials for the System ID account will establish authentication to PJM tools via the browserless interface. Please reference API documentation for each tool on PJM Tools page - Designated System ID accounts cannot access PJM tools user interfaces (UI s), and can only be used for browserless activity. System ID account passwords do not expire, and the distribution of System ID account credentials to users of the account will be managed by the company account manager. PJM will not be responsible for creation and management of the company System ID account. If a new System ID account must be created, the general user must create a new User account and then follow the conversion steps. To create a new System ID account in the Account Manager tool, the company account manager will perform the following: 37 P age

40 1. On the Add New User page, An AM can add a new account and designate it as a system id Click on the Add New User tab: o Fill out all of the required user information o Select the System ID checkbox o The AM is only allowed to select the company for which they are the approved AM. o Select Next to proceed through the new user registration process Select Tool Access for the account and select the Submit button. User will receive an containing their Company Longname and Company Shortname stating that their account was successfully created with a link to set their password. 38 P age

41 Please note that the link to reset the password expires after 4 hours. This is a security feature to help prevent other users or automated systems to gain access to a user account. Usernames are not provided in this for security purposes. Once the user selects the link to create their password, the user will submit the new password, and generate a notification that is sent to the user and Company Account Manager(s). This will contain the user s Company Longname, Company Shortname, Username, First name, Last name, Address, and Phone Number: Converting a Standard User Account into a System ID Account An existing user account may be converted into a System ID account by performing the following actions. Please note that the conversion of a user account into a System ID account is irreversible. Once the account is designated a System ID account, you cannot change the account back to a user account. 39 P age

42 On the User Profile - Account Information page, the System ID check box will be selected to convert an existing user account to a System ID account. Select the Submit button to submit the change. The user will be prompted with a warning message ( No to cancel the request, and Yes to Submit the request): The user will receive a Success: User Profile Saved message, and the System ID checkbox will be selected. 40 P age

43 Single User Multi Account (SUMA) for Member Account Managers (CAM s) Overview Single User Muli-Account (SUMA) is a process in which single sign on capabilities are assigned to Company Account Managers (CAM) to combine all accounts under one primary account to maintain a single account username and password, as well as to perform account management for their user base across all accounts in which the CAM manages. Below are the high level bullet points/rules with this feature: Single User Multi Account- provides Single Sign On capability for Company Account Managers to combine all of their accounts under one username and password. SUMA user accounts can have one primary account and multiple secondary accounts. Default accesses are linked to the primary account. PJM Tools applications cannot be requested or granted to SUMA user accounts. Section 1: Steps to create new Single User Multi Account user account 1. Member CAM(s) that are CAM(s) to multiple accounts and want to link them under a single user account should submit a new CAM Form B/B1. As part of the process, the CAM(s) should identify a primary account that will be used to provide default access as well as for auditing purposes. 2. PJM CAM(s) have the ability to link multiple accounts to one user. Once the PJM CAM(s) receive the completed CAM Form B/B1, they should work with the Member CAM(s) to create the new SUMA user account. 3. When PJM CAM creates the SUMA user account New User Registration should be sent to the Member CAM(s). The CAM(s) should create their initial password by clicking on the link in the New User Registration P age

44 4. Note that the SUMA user accounts can only have Account Manager Read/Write access and default access. If the CAM(s) want additional tool access (Ex: Exschedule, Markets Gateway etc) they would need to create separate user accounts for those tools. 5. After the SUMA user account has been created if the Member CAM(s) want to link additional accounts, they would need to work with PJM CAM(s). Section 2: Single User Multi Account CAM updating profile information 1. Navigate to Account Manager URL. Enter the Single user Multi Account username and password and click on Sign In button 42 P age

45 2. Click on User Profile tab. By default, the user will land on Profile Information subtab. 3. On the Profile Information subtab page, the user can update his/her contact information, change his/her password, set his/her security questions for self-service password reset, terminate the user account etc. Please note that any changes made on this page will affect all the accounts that are linked with this username. For example, SUMA CAM RobWilson has combined 5 accounts into one account, so he will receive only one password expiration instead of 5 s and he has to change his password on only one user account instead of 5 different user accounts. 43 P age

46 4. Click on Account Access subtab under User Profile. User will see all of the access currently on the account. By default, the Employer account (primary account) section is expanded. 5. Click on the arrow on the left hand side of the page to expand a Non- Employer account (secondary account) section. 44 P age

47 6. Click on Trash icon to remove an account. Terminated accounts are displayed in Fuchsia color. Section 3: Single User Multi Account users managing their users accounts Single User Multi Account user - Creating new users Single User Multi Account users can create new users for all of the accounts that they are CAM for by logging into Account Manager with their SUMA username and password 45 P age

48 1. Click on Add New User tab. 2. Enter User Information and select the account from the Account Access list and click on Next button. Note that, on the Account Access section, all the Accounts that the logged in user is a CAM for should be listed. 3. Select the tool access and click on Submit button. 46 P age

49 Single User Multi Account user Pending Dashboard changes 1. Click on Pending Tasks tab. On the User Access Requests and User Requests pages, the logged in CAM will see user requests for all accounts he/she is CAM for example below for SUMA CAM RobWilson who is CAM for 5 different accounts. User Access Requests page: 47 P age

50 User Requests page: Single User Multi Account user My Company changes Single User Multi Account users can view all of their accounts and request tool access for any of their accounts by logging into Account Manager with their SUMA username and password 1. Click on My Company tab. By default, details of the Employer (primary) account are displayed. 2. The user can switch to their Non-Employer (secondary) accounts by entering the Account name in the Account field and clicking on Enter. 48 P age

51 Single User Multi Account user Search changes Single User Multi Account users can lookup users belonging to accounts that they are CAM for from the Search pages. 1. Click on Search tab. By default, user lands on the User Search subtab. Example below, SUMA CAM RobWilson is able to search for users from all of his accounts. 49 P age

52 User Search page: Access Search page: Points to Note: 1. SUMA Users cannot unlock/terminate another SUMA User (even if they have shared accounts) 2. PJM CAMs and Support users can issue a password reset or lock/unlock a SUMA user accounts. 50 P age

53 Account Manager Multi-factor Authentication (MFA) What is Multi-Factor Authentication (MFA) MFA stands for Multi Factor Authentication. It is a feature that adds an extra layer of protection by requiring more than one method of authentication. The first authentication step is still using regular user id and passwords. Upon successful login there will be a prompt for a soft token (also known as a one-time password). Soft Token/One-Time Password The Soft token is PJM s implementation of the second authentication factor. It is randomly generated 8-digit number which is sent to the address associated with the user id in Account Manager. Compared to regular passwords, Soft Tokens are considered safer since they keep on changing, meaning that they are not vulnerable against replay attacks. The goal of MFA is to protect an unauthorized person to access the application. The token expires after 5 minutes from the time it was ed. A user can request for new token or Sign out of the Soft token page. Once a user authenticates through this double authentication method, the user will not be asked to enter token again for 90 days for subsequent logins from the stored device profile. A maximum of 2 device profiles per user can be stored. If a 3 rd device profile is detected, the oldest profile will be removed from the list and the user will have to enter a Soft Token again in order to access the application. Device profiles are based on the following attributes: Browser (I.E vs Chrome) Installed fonts and Zoom Device Time Zone Browser/Screen resolution If a user signs out from the Soft Token page, you will be redirected to the main etools login page. Who does MFA apply to All Account Managers (PJM CAM and Member CAM) or any roles which give access to approve or change user passwords in Account Manager. 51 P age

54 Step by step guide for logging in using MFA 1. Login to Account Manager using the account manager URL. 2. After successful login user will be prompted to Enter Soft Token. 3. Check the associated with Account Manager for the soft token. 52 P age

55 4. Copy the soft token from and paste in Soft token box below. 53 P age

56 5. Click on Finish Login. 6. User should gain access into the Account Manager tool. Troubleshooting and expected errors with MFA. What happens when a user clicks back on the Soft Token Page while using IE browser User will see a message for expiring webpage. (2 nd screenshot below) 54 P age

57 What happen if the user changes the URL back to Account Manager, on page expired page User may see the below Page Not Found if the user types the Account Manager URL again. Entering other applications URL will take you to that particular application. If the user needs to log back into Account Manager, closing the browser session and opening new session should resolve this issue. Clicking back on Soft Token Page while using Chrome In Chrome, clicking the back button will bring the user back to the Soft Token Page. User will receive new token for each time they click the back button. Only the latest soft token received will be valid and soft tokens expire within 5 minutes from the time it was sent. 55 P age

58 Navigating to Account Manager while the user is logged into other applications The user will gain access to the Account Manager tool normally if the device was previously stored in memory. The user will be prompted for the soft token if the device used was not stored in memory or if the soft token expired. What happens when a user navigates to other applications from the Soft Token Page User should be able to navigate to the application with no issues. 56 P age

59 How would I know if my device profile/ ed soft token has expired When the user device profile expires user will simply be asked to Enter Soft Token as they did on their initial logon. If the soft token entered by the user has expired because it has been more than 5 minutes since the soft token was sent to the user they may see the Error 408 below. Changing the URL on this page to the Account Manager URL ( will bring back the user to the Soft Token page. User should receive new token to enter in the Soft Token field. What happens when a user enters the wrong Soft Token When a user provides the wrong soft token, the user will be presented with the below Invalid Soft Token message. Clicking on OK button will send the user a new token. Only the latest Soft token will be valid. 57 P age

60 Section 2: Revision History Revision Version 00 Draft (03/09/15) Created a new document for the refreshed application that was previously Customer Account Manager (CAM) and is now Account Manager. Updated the application functionality in accordance with the new screens for New User Registration, User Account Management, and Customer Account Manager (CAM) User Account Management for delivery on 03/09/15. This is the first release of the PJM Account Manager User Guide. Revision Version 01 Draft (03/18/15) Updated CAM references to AM. Updated User Search actions. Updated Request Access and Request Company Access functions. Updated My Company > Access functionality. Updated AM User Profile Updates Revision Version 02 Draft (05/27/15) Tool Enhancements to be delivered on 5/28/15 - Updated User Search Page (User Search Criteria and User Search Results), System generated s for Password Reset and Password Creation, Trashcan icon on User Search Results to terminate users, Title for existing users are not mandatory entries. Revision Version 03 Draft (08/05/15) Tool Enhancements to be delivered August 2015 Update for UI Redesign - New User Registration, CAM New User Registration, User and Access Search pages. Revision Version 04 Draft (09/14/15) Tool Enhancement to be delivered on September 15, 2015 Security Enhancement for creating a System ID account, converting an existing user account into a System ID account, and updating UI screenshots to include the new System ID checkbox, and User Search Results page containing the System ID flag. Revision Version 05 Draft (12/20/15) Tool Enhancements to be delivered December 29, ) Changed all header/field names from company, with the exception of the My Company tab to account to utilize terminology associated with Account Management. 2) Pending Tasks page divided into 2 sub-tabs to break out user access and user requests. Pending Tasks User Access Requests page will only include user access requests (not bundled/single requests), and the user requests page will only include profile requests (Last Name Change) requiring CAM approval. 3) Add New User will contain a single data table to select the company account for which the user will require tool access. A radio button will be the method for company account selection. 4) User and Access Search pages will conform to search filtering used across all PJM refreshed tools. The search filter criteria section is removed to allow for filtering to be performed directly within the data table headers. No change in filtering logic. Revision Version 06 Draft (08/25/16) 58 P age

61 Single User Multi-Account Tool Enhancements to be delivered September 8, Single User Muli-Account (SUMA) is a process in which single sign on capabilities are assigned to Company Account Managers (CAM) to combine all accounts under one primary account to maintain a single account username and password, as well as to perform account management for their user base across all accounts in which the CAM manages. Below are the high level bullet points/rules with this feature: Single User Multi Account- provides Single Sign On capability for Company Account Managers to combine all of their accounts under one username and password. SUMA user accounts can have one primary account and multiple secondary accounts. Default accesses are linked to the primary account. PJM Tools applications cannot be requested or granted to SUMA user accounts. Revision Version 07--Draft (03/02/16) Multi Factor Authentication (MFA) for Account Manager to be delivered March 29, This double authentication is role based and only required for CAM users or any roles which is authorized to give access to approve or change user passwords. The first authentication step is still using regular passwords; however this following step of the authentication process with Soft Tokens requires the users to enter a randomly generated 8- digit number which is sent to the address which they have stored in Account Manager. Document was also updated to include Security Questions/Answers for self-service password reset capability Review Approval Revision Version Effective Date Approver/Title Department 00 03/09/15 Gautam Punjabi Project Manager 01 03/20/15 Gautam Punjabi Project Manager 02 05/28/15 Kevin Bonner Senior Business Analyst 03 08/05/15 Kevin Bonner Senior Business Analyst 04 09/14/15 Kevin Bonner Senior Business Analyst 05 12/20/15 Kevin Bonner Senior Business Analyst Development and Integration Services Development and Integration Services Markets Applications Markets Applications Markets Applications Markets Applications 59 P age

62 06 08/25/16 Kevin Bonner Senior Product Manager 07 03/02/2017 Kevin Bonner Senior Product Manager Development and Integration Services Development and Integration Services 60 P age