Configure Multi-Factor Authentication (MFA) for your account


Each time you log into the Armor Management Portal (AMP), you must connect via a multi-factor authentication (MFA) method. There are two MFA methods: 

  • Phone call
    • Every time you log into AMP, you will receive a phone call. Answer the call, and follow the instructions to access AMP. 
  • Phone application (Okta Verify)
    • Every time you log into AMP, you will receive a push notification on your phone from the application. Open the application, and then click Verify to access AMP. 

Users are not required to enroll in both MFA options, but at a minimum, the phone call option is required.


Configure MFA For New User

The first time a user logs into AMP, the user will be prompted to configure their MFA. All users are required to setup the MFA phone call option. After configuring the MFA phone call option, the user can choose to optionally setup the MFA phone application (Okta Verify).

  1. Navigate to https://amp.armor.com and enter your credentials

  2. The required MFA phone call setup wizard will be launched.

  3. Enter the phone number you want to use for your MFA phone call

  4. Click the Call button

  5. When your phone rings, a 5 digit code will be read to you and you will enter the 5 digit code into the Verify box on the screen.

  6. Once the setup for the required MFA phone call is complete, you will see a screen that allows you to optionally setup the MFA phone application

  7. To setup the optional MFA phone application, click the Set up link

  8. The MFA phone application setup wizard will be launched.

  9. Select the type device

  10. In your phone device, download the application called Okta Verify and open the Okta Verify app.

  11. Click next in the setup wizard

  12. In the Okta Verify app click Add Account and choose Organization. You will be prompted to scan the QR code in the setup wizard with the app on your phone.

  13. After the MFA configuration is complete, you should be successfully logged into the AMP portal.


Change MFA Method Used For AMP MFA

If you have configured both the MFA options, the last MFA option that was used to successfully login to AMP with be used as the default MFA option for all subsequent AMP logins.

To change the default MFA option used (only applies if enrolled in both MFA options)

  1. Navigate to https://amp.armor.com and enter your credentials

  2. Click on the drop down on the MFA verification screen and select the MFA option.

  3. Complete the MFA verification process


MFA Management

All MFA management (i.e. phone number change, MFA enrollment) will be done in the Armor Okta Dashboard.

  1. In the Armor Management Portal (AMP), in the top, right corner, click the vertical ellipses. 

  2. In the drop-down menu, select Settings

  3. Click Security + Authentication

  4. Click the Armor Okta Dashboard link. This will open the Armor Okta Dashboard in a new tab in your web browser.

  5. From the dashboard, pull down the menu under your user name in the top right corner of the dashboard.

  6. Select the Settings option.

  7. Select the green Edit Profile button and verify your credentials and MFA to enable the editing of the account settings.

  8. Scroll the page to the Extra Verification section. You should see a Remove option on the MFA options you are currently enrolled in and a Set up option for those you are not enrolled in.

  9. To change your phone number or MFA enrollment, select to Remove any options that you are currently enrolled in.

  10. The select the Set up option next to the MFA enrollment you wish to enroll in and follow the instructions.


    You must re-enroll in the MFA phone call. If you fail to re-enroll, you will be prompted to enroll before you are able to access AMP.

Troubleshoot MFA for a new phone device or phone number

Every time you log into the Armor Management Portal (AMP), you must connect via a multi-factor authentication (MFA) method that is specific to your phone device or phone number. As a result, if you change your phone device or phone number, you may need to perform additonal steps in order to maintain access to your AMP account.

Review the following scenarios to learn how to maintain access to your AMP account: 

 If you have your current phone device and a new phone device available

You can use these instructions if you:

  • Will soon switch phone devices OR
  • Have both phone devices available

Follow the instructions listed in the MFA Management section, then follow the instructions listed under Configure MFA For New User. 

 If you use the phone call method, and you have already changed your phone number

Please call support. Armor will perform a forced reset on your MFA enrollment. Your MFA enrollment will be removed and you will re-enroll in MFA using the configuration steps listed in the Configure MFA For New User section.

  1. Contact Armor Support to update your phone number.
    • For the United States office, call + 1 877 262 3473. For the United Kingdom office, call +44 800 500 3167.
 If you use the phone application (Microsoft Authenticator) method, and you have already changed your phone device

You can use these instructions if you:

  • You can use these instructions if you:

    • Used the phone application (Okta Verify) to access AMP AND
    • Already switched to a different phone device

    Log into AMP using the instructions in the Change MFA Method section, then use the steps listed in the MFA Management section to reconfigure verification using Okta Verify.



Create and invite a user account


  1. In the Armor Management Portal (AMP), in the left-side navigation, click Account
  2. Click Users
  3. Click the plus ( + ) icon. 
  4. Complete the First Name, Last Name, and Email Address fields. 
    • The email address you enter will be the username. 
  5. Select a role for this user. 
    • You must assign a role to the user. 
    • You can assign multiple roles to the user. 
    • You can assign a default role (Admin, Technical, Billing). 
      • Admin contains every permission in AMP.
      • Technical contains mostly write-only permissions. 
      • Billing contains mostly read-only permissions 
    • To learn about Roles and Permissions, see Roles and Permissions.
  6. Click Create User. An email will be sent to the user. After 96 hours, the sign-up link in the email will expire.
    • If the link expires, you can resend the user invitation. In the Users screen, hover over the desired user, click the vertical ellipses, and then select Resend Invitation.
    • If you want to remove this newly created / invited user from your account, see Remove a newly created / invited user from your account.


Accept and complete a user invitation

Step 1: Open the Account Signup email

  1. In the email from Armor, click the link.
    • You will be redirected to enter your account security information, including payment information.
      • If you already coordinated your payment process with Armor, then you will not see the payment screen.

Step 2: Complete your security information

In this step, you will add your phone number to your account. This phone number will be used for multi-factor authentication. To complete the account signup process and to log into AMP, you must be near this phone number.
  1. Note your Armor username. 
    • The Username will be pre-populated with the email address of the Primary Contact for the account.
  2. In Password and Confirm Password, create and enter an account password.
    • Your password must be at least 12 characters in length.
    • Your password must contain an upper-case character, a lower-case character, a number, and a special character.
    • Your password cannot contain personal information, such as your name, email address, birthday, etc. For example, if your name is John Smith, then you cannot use joh or smi in your password.
    • You can only change your password once every 24 hours.
    • Passwords expire after 60 days. 
    • After 6 failed login attempts, you will be locked out of your account for an hour. To resolve this, you must contact your account administrator or contact Armor Support.
    • After 15 minutes of no activity, you will be logged out of the Armor Management Portal (AMP).
  3. Complete the Challenge Phrase and Challenge Response
    • If you call Armor for technical support, you will be asked the Challenge Phrase, and you must correctly answer the Challenge Response
    • Do not use inappropriate language or suggestive material. 
    • The answer must be at least five characters long. 
  4. In Phone Number, select your country code / flag, and then enter your phone number.
    • This phone number will be used for multi-factor authentication (MFA). Every time you log into the Armor Management Portal (AMP), you will receive a phone call in order to complete the login process.
    • You can enter a phone number with spaces and special characters, such as (555) 555-555. 
    • (Optional) If your phone number contains an extension, enter the number in Extension. You cannot include spaces or special characters in this field.
  5. Click Continue.

If you already coordinated with Armor to pay with a check, then you will be redirected to Armor Management Portal (AMP) login screen..

Step 3: Complete your payment information

  1. In Currency, select your currency.
  2. (Optional) If your business is tax exempt, select I'm tax exempt.
    • In Tax Exempt ID, enter a valid tax exempt ID.
  3. For Payment Method, mark the desired payment (credit card or bank account). 
Option 1: Credit card 

Cardholder Name, Address, City, State, and Postal Code will be pre-populated with the name and contact information for the Primary Contact on the account.

  1. In Card Number, enter the credit card number.
  2. In Expiration Date, select the appropriate month and year.
  3. In CVV, enter the verification number for the credit card
  4. In Country, select the corresponding country.
  5. Click Submit.

You will be redirected to Armor Management Portal (AMP) login screen.

Option 2: ACH Bank Debit
  1. In ABA / Routing Number, enter the corresponding banking number.
  2. In Bank Account Number, enter the account number.
  3. Select the appropriate Account Type.
  4. In Bank Name, enter the name of the banking institution.
  5. In Account Holder Name, enter the name of the account holder.
  6. Click Submit.

You will be redirected to Armor Management Portal (AMP) login screen.


Remove a newly created / invited user from your account

You can remove a user account that is in the Invited status or Enabled status.  

  1. In the Armor Management Portal (AMP), in the left-side navigation, click Account
  2. Click Users
  3. Locate the newly created user. 
  4. Hover over the user, and then click the vertical ellipses. 
  5. Select Remove User from Account
  6. Click OK.  


Enable or disable a user account 

A user cannot disable or enable their own user account.

When you disable a user, you also disable the ability to edit their roles. You cannot add or remove a disabled user's roles.

  1. In the Armor Management Portal (AMP), in the left-side navigation, click Account
  2. Click Users
  3. Locate and hover over the desired user.
  4. Click the vertical ellipses.
  5. Click Enable or Disable
  6. Click OK.

After you disable a user, you can then remove a user from your account. 

A user cannot remove their own user account.

  1. In the Armor Management Portal (AMP), in the left-side navigation, click Account
  2. Click Users
  3. Locate and hover over the desired user. 
  4. Click the vertical ellipses. 
  5. Select Remove User from Account
  6. Click OK


Switch to another user account

If you have multiple Armor Management Portal (AMP) accounts, you can simply switch to another user account. You do not have to logout and login again to access your other accounts. 

You can switch accounts while inside a specific page without being redirected to the home page. This function exists when you switch to another account that contains the same, corresponding page.

  1. In the Armor Management Portal (AMP), in the top, right corner, click the vertical ellipses.  
  2. In the menu that appears, select the desired account. The screen will automatically refresh and load the selected account. 


Update basic profile information

  1. In the Armor Management Portal (AMP), in the top, right corner, click the vertical ellipses. 
  2. Click Settings
  3. Make your desired changes. 

  4. Click Update User


Change your password


To create a secure login for your account, Armor recommends that you use a passphrase, and not a password.

A passphrase is a combination of seemingly unrelated words; a password tends to be a single word, followed by numbers and special characters. To increase the strength of your passphrase, you can add numbers, special characters, and a mix of upper-case and lower-case letters.

For example, you can enhance the passphrase armoravocadosummer to armor@vocado$uMM3er.

When you create and change your password in AMP, consider the following statements:

  • You can only change your password once every 24 hours.
  • Passwords expire after 60 days. 
  • You cannot use any of your previous 24 passwords.
  • After 6 failed login attempts, you will be locked out of your account for an hour.
    • An account administrator on your account or Armor support can unlock your account. 
  • After 15 minutes of inactivity, you will be logged out of the Armor Management Portal (AMP).  
  • You will receive an email from Armor to confirm that you have changed your password. If you wrongly receive this email, you must contact Armor immediately.
  1. In the Armor Management Portal (AMP), in the top, right corner, click the vertical ellipses. 

  2. In the drop-down menu, select Settings

  3. Click Security + Authentication

  4. Click the Armor Okta Dashboard link. This will open the Armor Okta Dashboard in a new tab in your web browser.

  5. From the dashboard, pull down the menu under your user name in the top right corner of the dashboard.

  6. Select the Settings option.

  7. Select the green Edit Profile button and verify your credentials and MFA to enable the editing of the account settings.

  8. Scroll the page to the Change Password section.

    1. The password requirements are displayed on the screen in the Change Password section

  9. Enter your current password and the new password and click Change Password

  10. You will then be required to enter your current password and click Verify

  11. You will then be asked to verify your MFA which is required to complete the changing of your password

  12. Once verified, your password has been changed


Reset a forgotten password


You can only change your password once every 24 hours.

You can reset your password via email.


Reset a password via email

  1. On the login page, click Need additional help?

  2. Click Forgot Password?

  3. Enter the email address associated with your user account, and then click Reset via Email.

  4. Click the Reset Password link in the email. 

  5. Enter a new password; re-enter the password to confirm, and then click Reset Password

    • You will receive an error message if: 

      • Your passwords do not match. 

      • Your password does not meet the password requirements. 

      • Your password was changed less than 24 hours ago. 

      • Your password was recently used. (You cannot use any of your previous 24 passwords.)

  6. After you reset your password, your screen will refresh to the Armor Okta Dashboard.

  7. To access the AMP Portal, Click on the AMP icon on the dashboard

  8. A new tab will open and prompt you for MFA verification.

  9. After successful validation you will be navigated to the Armor Management Portal (AMP).


Roles and Permissions


Create a role and add permissions

  1. In the Armor Management Portal (AMP), in the left-side navigation, click Account
  2. Click Roles + Permissions
  3. Click the plus ( + ) icon. 
  4. In the top, right corner of the screen, hover over the gear icon. 
  5. Click the blue pencil (Rename) icon.
  6. In the window that appears, enter a descriptive name, and then click Rename Role.
  7. In the top menu, click Members
  8. In the field, enter and select the user (or users) to assign to the role. 
  9. In the top menu, click Permissions
  10. Mark the permissions to add to your role. 
  11. At the bottom of the screen, click Save Role


Assign a role to an existing user account 

  1. In the Armor Management Portal (AMP), in the left-side navigation, click Account
  2. Click Roles + Permissions
  3. Locate and select the desired role. 
  4. In the top menu, click Members
  5. In the field, enter and select the desired user. 
    • The change will be automatically saved. 
    • The user will have immediate access to the permissions within the role. 
  6. (Optional) To remove a user, hover over the desired user, click the trash icon, and then click Remove user access.


Configure notification preferences


Armor recommends that you configure your account to receive notifications for Account, Billing, and Technical events.

These notification preferences do not relate to support tickets.

To update your notification preferences for support tickets, see Support Tickets.

Account

You will receive a notification when:

  • MFA change/enrollment

  • A password change

Billing

You will receive a notification when:

  • An invoice has posted. 
  • An invoice is past due (2, 10, 15, 25, and 30 days).
  • A payment method will soon expire (1, 15, and 30 days).


You can configure a user to become the primary billing contact for an account. This user will receive billing notifications. Additionally, this user will be listed in the Bill to field in an invoice. 

  1. In the Armor Management Portal (AMP), in the left-side navigation, click Account.
  2. Click Users
  3. Locate and hover over the desired user. 
  4. Click the vertical ellipses. 
  5. Select Set as Primary Billing Contact
  6. Click OK
Technical

You will receive a notification when:

  • A virtual machine will be deleted or downgraded.
  • CPU, disk, and memory utilization is at more than 90% for 5 minutes.
  • Ping, SSH (Linux), or RDP (Windows) fails for 5 minutes.

You can only change the notification preferences for your own account. You cannot change the notification preferences for other user accounts.

  1. In the Armor Management Portal (AMP), in the top, right corner, click the vertical ellipses.
  2. Click Settings
  3. Click Notification Preferences.
  4. Use the slider to make your desired changes.
    • Select Email to receive notifications through email. 
  5. Click Update Notification Preference to save your changes. 

The above notifications preference types are not available unless the user is assigned one of the following permissions:

AccountBillingTechnical
  • Read Identity
  • Update Personal Identity
  • Write Identity
  • Update Payment Information
  • View Invoices
  • Read Product Catalog
  • View Subscriptions
  • Write Subscriptions
  • Read Workload(s)
  • Write Workload
  • Read Virtual Machine(s)
  • Write Virtual Machine




Was this helpful?
Your Rating: Results: 1 Star2 Star3 Star4 Star5 Star 31 rates