commercial single sign-on (csso) user & system … user & system administration user guide...

For informational purposes only, not considered an advertisement.

Commercial Single Sign-On (CSSO)

User & System Administration USER GUIDE

CSSO User & System Administration USER GUIDE

©2017 M&T Bank. Member FDIC. 01-2017 —1—

WELCOME TO M&T BANK’S COMMERCIAL SINGLE

SIGN-ON PLATFORM

M&T Bank’s Commercial Single Sign-on (CSSO) system provides access to the following Treasury Management

applications through the use of a single set of login credentials.

ACH Monitor - M&T Bank’s ACH Monitor Fraud Review and Approval application allows clients to monitor and reject

any potential ACH debit attempting to post to their account that they have not pre-authorized. ACH Monitor Direct

Transmission is an Internet alternative to telephone input of control totals on the Voice Response System (VRS). In

addition, ACH Monitor Direct Transmission users have access to enhanced ACH reporting on originated and received

transactions.

Escrow Online - M&T Bank’s Escrow Online application allows users to process and view transactions for Master

Escrow accounts and sub-accounts. Clients may close existing sub-accounts, set up new sub-accounts, view account

balances, allocate funds from the Master Escrow to sub-accounts, and access activity reports.

File Transfer Manager - M&T’s File Transfer Manager application allows clients to send and retrieve receivables and

payment files with M&T Bank. M&T Bank automatically encrypts all incoming and outgoing files with PGP encryption.

eStatements - M&T Bank’s Commercial eStatements application allows users to access Checking, Savings and

Account Analysis statements online. Up to 24 months of historical statements are available for users to view, save

and/or print.

Image Lockbox - M&T’s Image Lockbox application allows clients to review receivables, resolve exceptions and view

financial reporting in as soon as 30 minutes after deposit processing. Clients are able to view images of deposited

checks and documents via the Internet and if subscribed to the additional Real Time Decision service, are able to

“Accept”, “Reject” or provide missing information to rejected items. All accepted items will be processed and deposited

with the same day’s work, saving the client multiple days of float.

International Trade Online – M&T Bank’s International Trade application allows clients to manage their Letters of

Credit and Documentary Collections. Furthermore it allows clients to create, submit, and track trade instruments and

transactions through a web-based interface. Clients will be able to send and receive trade-related messages through

the site, generate reports about their organization's trade activities, and maintain reference data.

National Image Lockbox - M&T’s Image Lockbox application allows clients to review receivables and view financial

reporting by the end of the deposit day. Clients are able to view images of deposited checks and documents via the

Internet and have the ability to subscribe to additional service that will allow for additional storage and retention.

Remote Check Deposit - M&T’s Remote Check Deposit application allows checks to be deposited to the

bank. Clients will use the platform to scan checks, balance transactions and transmit deposit information to the

Bank. Additionally, clients are able to create an item, deposit and/or audit level report.

The CSSO system has an administration module, which allows company designated administrators to perform user

management activities such as adding, modifying, deleting users and assigning services. Administrators also have access

to reporting involving Security Level & User Permissions and User Activity



TABLE OF CONTENTS

SECTION I: getting STARTED ........................................................ 3

FIRST TIME LOG ON ...................................................................... 3

SECTION II: USER GUIDE .............................................................. 9

Other Options on the Commercial Services Log On page ............... 9

COMMERCIAL SERVICES HOME PAGE ..................................... 11

SECTION III: ADMINISTRATION .................................................. 16

System Administrator Features ...................................................... 16

USER(S) ........................................................................................ 17

Dual Administration ........................................................................ 26

Reports .......................................................................................... 28

CONTACT US................................................................................ 30



SECTION I: GETTING STARTED

FIRST TIME LOG ON

1. Prior to logging in for the first time, a user will receive two separate emails (similar to the ones shown below)

informing them of their user name and one-time password.

Proceed to the “Log On” page and enter the supplied user name and temporary password

Link to “Log On” page: https://commercialservices.mandtbank.com/

Username e-mail:

Password e-mail:

2. To assist in protecting you from potential fraud, we offer access to a security feature called Protector, at no cost.

Protector is designed to mask Commercial Services Single Sign-On users’ log in credentials from keystroke

logging malware. You can download Protector to each PC from which you access Commercial Services. Upon

your initial log on, you will be presented with a pop-up message that includes instructions for downloading

Protector.

If you need assistance with activation, please refer to the Protector User Guide located in the Learning Center or

please contact the Commercial Service Team at Monday-Friday, 8:00am-6:00pm ET at 1-800-724-2240.

https://commercialservices.mandtbank.com/



3. After installing Protector the fields for entering your Username and Password will appear in yellow and there will be

a locked padlock icon in the upper right hand corner to indicate the Protector service is turned on. Enter your User

Name and Temporary Password.

4. Next you will arrive on the Security Enhancement page. Click “Continue” to proceed.



5. After clicking “Continue”, you will be presented the Security Questions screen where you will be asked to select

and provide answers to five unique questions from a pre-determined list. After selecting the five questions and

providing answers, click the “Continue” button and you will be directed to the confirmation page.

Note: Establishing your security questions enables you to use the “Forgot Password?” link from the logon page of

CSSO. Once your security questions are established, upon clicking that link, you will be presented with two security

questions. If answered correctly, you will receive an email containing your new temporary password.



6. The security question Confirmation screen allows you to review the questions you selected and your answers

before submitting them to M&T. If you wish to change one of your questions and/or answers click the “Update your

Settings” button. To approve your selections click the “Finish” button and you will arrive at the “Password Change

Request” screen.

Note: “Would you like Us to Remember this Computer?” - M&T offers the option to remember your computer based on

your response during the enrollment process, as well as any subsequent challenge question pages. Consider choosing Yes

for any device that you routinely use to access M&T Bank Internet pages, including your work computer, tablet, home

computer or other device. If you are using someone else’s computer, a public computer or you do not want M&T to

remember this computer for any reason, select No. M&T will use this information during login attempts. If you choose Yes,

you may be required to confirm your identity less frequently. If you select No during enrollment, you may be asked to

authenticate yourself by answering challenge questions during future login attempts. You will have the opportunity to change

your decision regarding computer recognition during future logins.



7. On the Password Change Request screen, re-enter your temporary password, type in new password and type

your new password again in the “Confirm New Password” field. Next, click “Change Password”.

The requirements for passwords on Commercial Single Sign‐on are as follows:

Eight Character minimum and a maximum of 20

At least one UPPER case letter and one LOWER case letter

At least one number

Repeating characters limited to three

Cannot equal the user name

Cannot be reused for 361 days

Note: Your User password will expire every 90 days and trigger the Change Password page to display automatically. A

New User Password must be selected prior to logging in.



8. After successfully updating your password, you will receive a confirmation screen. Click “Continue” and you will be

logged into CSSO and arrive at the home page.

Note: Your challenge questions enable you to use the “Forgot Password?” link from the logon page of CSSO. Once your

challenge questions are established, clicking that link will present you with two challenge questions and if answered correct ly

you will be emailed a new temporary password. You can only self-administer a password reset if your challenge questions

have been completed, otherwise you will need to contact your administrator.



SECTION II: USER GUIDE

OTHER OPTIONS ON THE COMMERCIAL SERVICES

LOG ON PAGE

LOG ON HELP

FORGOT PASSWORD?

After clicking on the link, you will first be asked to enter your User Name (email address) and then you will be asked to enter

a response to one of your challenge questions.

Note: You can only utilize this feature if you have completed the Challenge questions that are part of your user profile. If

you have not done this, please contact your company administrator in order to have your password reset.



After providing a correct answers you will be emailed a temporary password



COMMERCIAL SERVICES HOME PAGE

Home – Clicking this link will return you to the above screen

3 4

6

1

5 7

8

1

10

2

9



Help

2



Contact Us

Logout - Clicking this link will log a user out of the Commercial Single Sign-On (CSSO) System

Dark Blue Banner - The Dark Blue Banner lists links to other Online Treasury Management Services. These services

are not currently enabled for Single Sign-on access and will require Log-In credentials.

My Profile - The My Profile feature allows users to:

Review their user information

Identify their company’s System Administrator on M&T’s Commercial Service Single Sign-on

Change their password

Update their challenge questions

1. Select the My Profile link located at the top left of the Single Sign-on home page.

2. Users can review their profile and identify their company’s system administrator or select Update your profile to

change their password and update their challenge questions.

3

4

6

User Profile Information

System Administrator Information

5



3. Selecting Update your profile provides the user the ability to change their password or update their challenge

questions and answers.

Light Green Banner - The Light Green Banner lists all M&T Online Treasury Management Services that are eligible for

Single Sign-on access. It also includes a link to Administration features and functions, but a user MUST be designated

as an Administrator for this option to appear. Administrator features and functions will be discussed in the next section of

the guide.

A Service highlighted in light green indicates a user has been assigned access to that service. A Service highlighted in

dark green indicates a user has NOT been assigned access to that service.

Messages – M&T Bank will use this area to post important messages related to a variety of topics such as System

Upgrades, Product Changes and Enhancements, Fraud Alerts, Hours for Support Coverage during holidays, etc. This is

also where CSSO Administrators for companies that have chosen Dual Administration will receive notifications related to

pending decisions that need to be acted on.

Security Center

Important Messages from M&T Bank Regarding:

Identity Theft

Security Tips

Security Messages

8

9

7



Learning Center

The Learning Center feature allows users to:

Review demos for M&T’s Treasury Management services

Review manuals for M&T’s Treasury Management services

Access forms for M&T’s Treasury Management services

Protector download link

10



SECTION III: ADMINISTRATION

SYSTEM ADMINISTRATOR FEATURES

M&T Banks Commercial Single Sign-On (CSSO) application allows you to easily administer user access for your

organization. Using CSSO Administration, you can add or delete users, and modify access to services your organization

uses, based on your specific requirements. This section of the user guide will walk you through how to complete each of

these actions using the CSSO Administration module. If you have any questions on the information contained in this user

guide, or on any of your M&T Bank Treasury Management services, please contact our experienced Commercial Service

Team Monday-Friday, 8:00 am – 6:00 pm ET at 1-800-724-2240.

The System Administrator Features are as follow:

User(s)

o Add a New User

o View/Update Current User(s)

Note: CSSO Administrator will only see users if they have Administration Access for that application

Dual Administration

Reports

Main Menu

Select the Administration tab from the Single Sign-on home page



USER(S)

Select User(s) from the sub-menu shown below

ADD NEW USER

1

2



To Add a New User, the System Administrator would:

User Profile - Complete the top section with User Profile information. Please note that all fields denoted with an

asterisk (*) are required.

Note: In some cases, a user may require multiple Login accounts if performing work for multiple companies (i.e.,

subsidiaries). If this is the case, you MUST assign a pseudo User Login (E-Mail Address) using the domain @csn.mtb (i.e.,

[email protected]). You would enter the user’s proper e-mail address into the Alternate E-mail field.

Manage User Services & Roles – The Available List Box will be populated with all the Single Sign-on Services that

have been made available to a company

Add or Remove a Service

Add a Service

a. Select the appropriate service to add to a user by clicking on it in the Available List Box, which will highlight it

b. Click on the “add >>” button and the service will be moved to the Assigned List Box

c. Select the appropriate role to assign the user (User or Admin) by clicking on the appropriate check box

d. Select Save at the bottom of the page when complete

e. A pop-up box will be displayed – ‘Are you sure you want to add this User Info?

Remove a Service

a. Select the appropriate service to remove from a user by clicking on it in the Assigned List Box, which will highlight

it

b. Click on the “<< remove” button and the service will be moved to the Available List Box

c. Select Save at the bottom of the page when complete

d. A pop-up box/message will be displayed – ‘Are you sure you want to update the existing User Info?

Enrollment Forms

M&T Bank’s Commercial Single Sign-on (CSSO) system requires users to be established both on CSSO and on the

individual applications that have been assigned to them. The Remote Check Deposit, Escrow Online, National Image

Lockbox and ACH Monitor applications have administrative functionality that allows client administrators to establish users

themselves

The eStatements, File Transfer Manager, International Trade Online and Image Lockbox applications require M&T

Operation’s personnel to establish users on the individual applications. In order to facilitate this, the CSSO system utilizes

on-line Enrollment forms. An enrollment button option will dynamically appear at the bottom of the Add New User screen

when one of the three identified applications are moved from the Available List Box to the Assigned List Box

Note: Enrollment can be done when adding a new user or updating an existing user. Enrollment does not take place in real-

time. It is performed by M&T Bank’s back office personnel and will generally be completed within 72 hours.

1

2



SAMPLE ENROLLMENT FORMS

eStatements

Note: Up to 10 Key Accounts may be entered for both Account Analysis and DDA.



File Transfer Manager



Image Lockbox



International Trade Online



VIEW/UPDATE CURRENT USER(S)

1. User Profile, Services & Roles and Enrollment

After selecting View/Update Current User(s), you will be presented a list of all available users

Each user will have a radio button to the left of their UUID (Unique User Identification). You select a user by clicking on the

radio button. Once you do, User Profile and Services & Roles data will be made available for updating. Apply your updates

and click the Save button



ENROLLMENT (MANAGE USER SERVICES & ROLES)

If eStatements, File Transfer Manager, International Trade Online or Image Lockbox is listed as an Assigned service,

an Administrator can modify a user’s enrollment by first clicking on the service and then clicking on the “modify” button. The

“modify” button will only become available to the administrator after the eStatements, File Transfer Manager, International

Trade Online or Image Lockbox service is selected in the Assigned list box.

Notes:

Cancel – This button will clear or undo any changes that have been made to User Profile and Service & Role data

as long as they have not been saved

Reset Password – This button will allow you to reset a user’s password. You will be prompted for confirmation

after clicking on the button. If you select “Yes”, a new temporary password will be emailed to the user

History – This button will present certain historical date and time tracking points related to the last time a user

accessed the system, changed their password, etc. The screen will also reflect when Protector has been installed

or declined.



2. User Status

After selecting View/Update Current User(s), you will be presented a list of all available users. Each user will have a radio

button to the left of their UUID. You select a user by clicking on the radio button. After clicking on the radio button, a drop-

down will appear under the Status column where you set a user’s status to:

Active

Suspend

Delete

*All Status changes take effect immediately

Notes:

Auto Suspend - Is a status assigned systematically when a user has not logged into CSSO within the last ninety

days. It may appear in the Status column but it is not available as a user selection from the drop-down. An

Administrator is not able to perform a password reset in this situation. If the user has answered their security

questions they can self-serve by utilizing the Forgot Password option on the Log On page otherwise the user will

need to contact the Commercial Service Team Monday-Friday, 8:00am-6:00pm ET at 1-800-724-2240.

Password Lock – (PWLock) – When this status is displayed only the User’s CSSO Log On is locked. M&T’s

Commercial Service Team or System Administrator can resolve the issue by resetting the User’s password. The

User’s password can be reset by following the password reset procedures currently in place. Only after a

Password reset will the CSSO status return to Active.

Bank Lock 1 / Bank Lock 2 / Review – If this status is displayed the user is locked out of CSSO. To have their ID

unlocked they must contact M&T’s Commercial Service Team. The Commercial Service Team can be reached

Monday-Friday, 8:00am-6:00pm ET at 1-800-724-2240.



DUAL ADMINISTRATION

The Dual System Administration Feature allows a company to have multiple System Administrators for the purpose of dual

control of user changes. If your organization has elected to use dual administration, a “Dual Administration” tab will be

available in the Administration module of CSSO.

If you elect to use dual administration, all administrative changes made in CSSO will require approval by a second

administrator and will remain in a pending status until approved by a second administrator. For this reason, it is important to

identify at least 2 administrators when access to CSSO is initially established. A user must be assigned administrative

privileges for each service they are responsible for administering.

We recommend that your organization prepare a contingency plan to address situations of when primary administrators are

out of the office or otherwise unavailable. This plan may include setting up additional administrators to approve changes in

these situations.

Notes: Clients must elect to have Dual Administration by selecting this option on the Client Election form. The feature is

established at the company level and only M&T personnel has the ability to assign and un-assign it

1. When there are changes pending approval, administrators for that service will receive an email notification

indicating there are changes pending in CSSO.

Administrators will also be informed that an approval is pending under the Messages section of the Home Page.

2. From the Administrator home page, select the Dual Administration tab. The changes awaiting approval will be

displayed.

3. The secondary System Administrator will review the change submitted by the initial System Administrator, as seen



below. The administrator may “Approve” or “Reject” the change, by selecting appropriately from the drop-down

Note: Administrators must have the Admin Role associated with that service assigned to them in CSSO in order to view or

approve administration request for a specific service.

Note: For a new user, there will be two entries for approval; one for the New User profile creation, and a second for the

“Service Roles” assigned. Approval of the “New User” profile must be submitted before an administrator can approve the

“Service Role” assignments. Once the “New User” profile is approved, the administrator should return to Dual Administration

and approve “Service Role” assignments.

4. Once an approval or rejection has been selected for each item, click on the “Submit” button to confirm the

selections. A confirmation will be displayed at the top of the screen.

5. An Administrator may choose to print the Approval List after submitting their decisions by clicking on the “Print”

button.

6. An email will be automatically generated to all users with Admin privileges when requests are approved or

rejected. The email includes an attachment of the Administration report in CSSO.



REPORTS

The Administration Reports Feature allows a System Administrator to create the following reporting:

Security Level and User Permissions report

User Activity Report

Select either Security Level & Permissions or User Activity Report

SECURITY LEVEL AND USER PERMISSIONS REPORT

1. The System Administrator would select the appropriate Specific Manager and/or User Name and click Submit to

create the report.

2. The report can either be printed or exported in MS Excel format.

3. A locked or unlocked padlock will also be displayed to identify the protector install status.



USER ACTIVITY REPORT

1. The System Administrator would select the appropriate Category and date range and click Submit to create the

report.

2. The report can either be printed or exported in MS Excel format.

3. The Protector install status will also be displayed.



CONTACT US

WE ARE HERE TO ASSIST YOU.

For Commercial Services Single Sign-On questions or other Treasury Management services, please contact your Treasury

Management Consultant or call M&T’s Commercial Service Team at:

1 (800) 724-2240 MONDAY – FRIDAY 8AM TO 6PM ET

commercial single sign-on (csso) user & system … user & system administration user guide...

Documents