foreword - infrabel · 2020. 7. 22. · an authenticator app is an app that generates (temporary)...

�1

TheinstructionsalwaysassumethatyouareloggingontoanapplicationfromoutsidetheInfrabelnetwork.Wewillthenaskyouforadditionalverificationor,toputitanotherway,asecondfactor.Afterall,wethenapplytheprincipleofMFAorMultiFactorAuthenticationtoprotectyouraccount.

Theexplanationdepends,amongotherthings,onthechoiceyoumakeasanadditionalverificationmethod. Anoverviewofallverificationmethodscanbefoundhere.Weadviseyoutogothroughthecontentofthatpagefirst.Thisway,youwillalsoknowwhatyouneedthe//Accountappforandwhatyouralternativesareifyoudon'twanttoorcouldn'tinstallit.

Choosebelowwhatappliestoyou

Foreword

Iwanttousethe//Accountapp

Idon'twanttousethe//AccountappChoosethisoptionifyouhavea

smartphoneortablet(personalorprofessional)andyouregularlylogontoanInfrabeltapplicationfromoutsidethe

Infrabelnetwork.Thisoptionistheeasiestoptioninthosecases.Afterall,youdon'thavetoenteryourusernameandpasswordeverytime.

Choosethisoption• ifyoudon'thaveasmartphoneortablet• orifyouonlyhavetosignuplikethis

onceeveryfewweeks• orif,forexample,youdon'thaveyour

smartphoneathand

Thismanualisintendedfor... ...andnotfor...

Infrabelemployees BusinessCornerusers,emergencyservices,partnersandcustomers.Untilnow,didyouonlyloginwithausernameandpassword?Seewhatchangeshere.Areyoualreadyenteringanadditionalfactor?Pleasefollowthisexplanation.

https://accounts.infrabel.be/nl/help/verif.html

https://accounts.infrabel.be/nl/help/resources/QuickRefBC.pdf

https://accounts.infrabel.be/nl/help/resources/QuickRefBCMFA.pdf

�2

Loginwiththe//Accountappoverviewofthestepstobeperformed

1.Installationofthe//Accountapp

2.Configuringthe//Accountapp

3.Initialregistrationtoanapplication

Nextapplications withthe//Accountapp

Reactivationofthe//Accountapp

Changingsettingsinthe//Accountapp

Installingandconfiguringanauthenticatorapp

Changepasswordorresetpassword

Manageyour(backup)authenticationmethods

initialsteps

subsequentoptionalsteps

Tapaframedrectangletoimmediatelynavigatetothesubject

everydaystep

Preparetoresetyourpasswordyourself!

1.Installation//Accountapp

2.Configuration//Accountapp

3.Firstloginwiththe//Accountapp

Nextregistrationswiththe//Accountapp

Reactivateyoursessioninthe//Accountapp

Changeyoursettingsinthe//Accountapp(optional)




Ifyouchoosetousethe//Accountapp,youwillnotonlybesafebutalsoveryeasytouse.beabletologintoapplicationswithouthavingtoenterausernameandpasswordeachtime.Asimplefingerscan,facialrecognitionorpasscodewilldo...

InstallationonanInfrabelregisteredmobiledevice(MDM)

Theinstallationhasalreadybeenperformedautomaticallyonthisunit(viatheCompanyPortal).

InstallationonyourpersonalAndroiddevice

▪ OpentheGooglePlayStore

▪ Browseorsearchforthe"//AccountInfrabel"app

▪ OnceyouhavefoundtheInfrabeltapplication,tap"Install".

▪ Opentheapp

InstallationonyourpersonaliPhoneoriPad

▪ OpentheAppStore

▪ Browseorsearchforthe"//AccountInfrabel"app

▪ OnceyouhavefoundtheInfrabeltapplication,tap"download".

▪ Opentheapp.

�3

1.Installationofthe//Accountapp

1 Openthe//Accountappandchooseyourlanguage

2 Browsetheintroductionscreens

3 Enteryourusername IfyouhaveanInfrabele-mail,yourusernameisthesameasyoure-mailaddress.Ifyoudonotknowyourusername,pleasecheckyourpayslipatthetop.

4 EnteryourInfrabelpassword

�4

2.Configuringthe//Accountapp

2

2

3










3 4

Don'tclickonthefirsttwoiconsyet.Theycanonlybe

usedafteryouhavecompletedthecurrent

configuration.

4

5 Loginwithverificationcode:makeyourchoice

Wealsoneedtocheckyouraccountnow-duringconfiguration.Wedothisusingaverificationcodethatwesendyou.Howwedothis,youchoose:

• bytextmessage:thenwe'llneedyourcellphonenumber

• viaalternativeemailaddress:weneedanemailaddressthatisdifferentfromtheaddressassociatedwithyourusername.

• Viaanauthenticator-appi:itispossiblethatyoualreadyinstalledandconfiguredanauthenticator-appforotherapplications.IfyoualsoconfigureditforyourInfrabelaccount,youcannowuseit.

•Ifyouhaveneverloggedinwithasecondfactorbefore,weneedextradata,andyouwillhavetoenteritinthenextstep.

Ifyousignedupearlierwithasecondfactor,youcanonlychooseanoptionthatisknowntous.Hereweexplainhowtosetotheroptions.

�5

5

Anauthenticatorappisanappthatgenerates(temporary)codestoverifyanaccount.Oneappallowsyoutomanagedifferentaccounts,forexample,youraccountassociatedwithyourpersonale-mailaddress,yourInfrabelaccount,anaccountwithanothercompany,etc.Youdon'tneedtobeconnectedtoamobilenetworktogetacodethroughanauthenticatorapp.Wedon'tcarewhichauthenticatorappyouuse(Microsoft,Google,...).










6 Completedataifnecessary

Thisstepisoptionalandwillonlybeshownif,fortheoptionyouchose,wedon'thaveanydatayet.Followtheinstructionthataccompaniesyourchoice:

• YouchoseSMSore-mail

Enteryourmobilephonenumberoranalternativee-mailaddressasrequested.Thismustbedifferentfromtheaddressassociatedwithyourusername.Infrabelwillonlyusetheinformationprovidedforthesecurityofyouraccount.Youcanalwaysdeleteyourdataatalaterdate:seehowtodothishere.

• Youchoseauthenticatorapp

Ifyouwanttoreceivetheverificationcodeviaanauthenticatorapp,youcanseeherehowtoperformtheinstallationandconfiguration.Werecommendthatyoudothisbeforesigninguptoanapplication.

�6

6a

6a

6b










7 Enteryourverificationcode

Enterthecodeyoureceived(viaemail,SMS,oryourauthenticatorapp).Tip:whenusingtheoption"sms"youcancopythecodefromthetextinyourkeyboard.OnIphonedevices,youneedtoclickontheverificationcodefieldbeforeyoureceivethetextmessage.Youshouldreceivethetextmessageande-mailwithinaminute.Ifnot,youcanrequestanewcode(seelinkonthescreen)

8 Setapasscode Setapasscodeasextrasecurity.Youwillalsobeabletousethefingerscanorfacialrecognitionfunctionsasanalternativetoenteringapasscode.

9 Allowaccesstootherfeaturesofyourphone

Alsogivepermissionto• beabletoreceivemessagesonyourdeviceforthe"Pushnotifications"method• tobeallowedtouseyourcameraforthe"QR-scan"methodFollowtheinstructionsonyourscreen

�7

7 8

8

7

9










You'redone! Yourappisfullyconfigured.Youcanclosethem,she'snowwaitingfor"furtheractions":

SheiswaitingtosendyouaPushnotificationorscanaQRcodeafteraloginrequest:

• whenyoulater(whenloggingontoanapplication)askfora"Pushnotification"theappwillopenautomatically.

• Whenyouchoose"QR-scan",youopentheappyourselfandtheappautomaticallyswitchestocameramodesothatyoucanscanthedisplayedQRcodewiththeapp.

•

�8










1 Gototheapplicationyouwanttoopen Forexamplehttps://sapfiori.infrabel.be/flp.

Clickon"Login" Leavethecheckboxopen.

Enteryourusername IfyouhaveanInfrabele-mail,yourusernameisthesameasyoure-mailaddress.Ifyoudonotknowyourusername,pleasecheckyourpayslipatthetop.

�9

3.Firstsignupwiththe//Accountapp

2

3










2 3

Uncheckthisboxifyoudonotworkonyourowndevice.

Ifyouleavethison,youwon'thavetoenteryourusernamenexttime.

Thissteponlyappliesthefirsttimeyoulogontoadevice'sbrowser.

https://sapfiori.infrabel.be/flp

4 Chooseyourverificationmethod

QRscan Youneedthe//Accountapponadeviceotherthantheoneyouarelogginginwith.It'sthesimplestandfastestmethodwhenlogginginonaPCorlaptop. Openthe//AccountappandpointthecameratotheQRcode.Justenteryourpasscode,fingerscanorfacialrecognitionandyou'reloggedin!

Pushnotification

Thisisthesimplestandquickestmethodwhenyoulogintoamobiledeviceusingthe//Accountapp.Youcanalsologinfromanotherdevice.Withthischoiceyouwillgetanotification(Pushnotification).Acceptthenotification.Giveyourpasscode,fingerscanorfacialrecognition.Ifyouworkononedevice,gobacktothebrowserfromwhichyousurfedtoyourapplication(ortotheappyouopened).Youareloggedin!

Verificationcode

Thisisaclassicmethodforwhichyoudon'tneedthe//Accountapp.Lesseasy,becauseyoustillneedtoenterapasswordandacode.Furtherexplanationcanbefoundhere.

�10

a

b

c










a

b

c

ThePASSWORDoptionisonlyavailableforBusinessCornerandemergencyservices.

or


Ifyouopenanapplicationonthesamedeviceandthesamebrowser*,yougetthefollowingbenefits:• Thesystemstillknowsyourusername(soyoudon'thavetoenteritanymore)• Thesystemremembersyourlastverificationmethod(soyoudon'thavetochooseitanymore):

*withouterasingthebrowsermemory










�11

Youchosethe"QR-scan"optionlasttime.

1 Gotoyourapplication Forexamplehttps://sapfiori.infrabel.be/flp

2 ScantheQRcode Openthe//AccountappandpointthecameratowardstheQRcodethatappears.Iftheappdoesnotopenincameramode,checkifyoursessionisstillactive(see"Reactivateyoursessioninthe//Accountapp").

Accept Acceptwithpasscode,fingerscanorfacialrecognition

You'resignedup!

1

2

3

1

2

3


Youchosetheoption"Pushnotification"lasttime.

1 Gotoyourapplication Forexamplehttps://sapfiori.infrabel.be/flp,oropenyourapp

2 ThePushnotificationwillbeautomaticallysent

Youwillreceivethenotificationonthedeviceonwhichyouinstalled//Account.Ifyoudon'treceiveanything,pleasecheckifyoursessionisstillactive(see"Reactivateyoursessioninthe//Accountapp").

Openthenotification Acceptthenotificationwithpasscode,fingerscanorfacialrecognition

You'resignedup! Ifyouworkononedevice,gobacktothebrowserfromwhichyousurfedtoyourapplication(ortotheappyouopened).Inthemeantime,itreceivedamessagefrom//Accountconfirmingyouraccount.

1

2

3

1

2

3

or

1

2

3










�12


Youchooseanothermethod Thiscanbedoneviathetabsontheleftoratthebottom.Orbyclickingon"//Account".

Someoneelseloggedontoyourphone

Registeryourselfviathelink<yourusernameorviathepeopleicononmobile

a

b

*withouterasingthebrowsermemory










�13

Youwanttochangeauthenticationmethodoruser

a

b

a

<yourusername

1 Openthe//Accountapp Ifyoursessionhasexpired,youwillalsoreceivethatmessageintheintroductionscreen.

2 Clickon"Next"

3 Unlockyouraccess Youdothiswithyourpasscode,yourfingerscanorfacialrecognitionofyourchoice.

4 Enteryourpassword Yourusernamealreadyknowstheapp.

5 Loginwithaverificationcode Usethesameinstructionsashere

Your//Accountsession isactiveagain

Reactivationofyoursessioninthe//Accountapp

Your//Accountsessionexpiresafteronemonth.Afterthattime,forsecurityreasons,weaskyoutologintotheappwith2morefactors.

Ifyoursessionhasexpired,youwillnotreceiveanyPushnotificationsandyouwillnotbeabletoperformaQRscanwithyourapp.SoifyouexperienceproblemsscanningQRorgettingPushnotifications,weadviseyoutoalwaysfirstcheckifyoursessionhasnotexpired:

yoursessionisactive yoursessionisnolongeractive

1 1










�14

1

1 Openthe//Accountapp Ifyoursessionhasexpired,reactivateyoursession

2 Tapusersettingsandchangepermissionto...

❑ yourbiometricdata Youcanenableordisablethepermissiontousefingerscanorfacialrecognition.ThesedatacanonlybereadbyyourdeviceandnotbyInfrabel.Ifyoudonotgivepermission,youmustenteryourpasscode.

❑ thecameraofyourdevice Ifyoudonotgivepermission,youcannotusetheQR-scanoptionasaverificationmethod.

❑ receivingnotifications Ifyouturnthisoff,youcannotusethePushnotificationoptionasaverificationmethod.

Changeyourlanguage

7 Logout

Reset IfsomethinggoeswrongwithreceivingPushnotificationsorscanningQRcodes,tryresettingtheappusingthissetting.

Closethewindow.You'redone.


2

2

4

3










�15

2a2b

2c

4

3

5

5

2a

2b

2c

�16

Tapaframedrectangletoimmediatelynavigatetothesubject

Loginwithoutthe//Accountappoverviewofthestepstobeperformed

Firstlogintoanapplicationwithoutthe//Accountapp

Nextapplications without//Accountapp




initialstep

subsequentoptionalsteps

everydaystep

Preparetoresetyourpasswordyourself!

Firstloginwithout//Accountapp

Nextregistration without//Accountapp





ClickonLogin Alwaysleavethecheckboxempty.

Enteryourusername Yourusernameisthesameasyouremailaddress.Ifyoudon'tknowyourusername,lookatthetopofyourpayslip.

4 Choose"verificationcode Fortheothermethodsyouneedthe//Accountapp.

5 Enteryourpassword

�17


23

2

3

4

4

Uncheckthisboxifyoudonotworkonyour

owndevice.Ifyouleavethison,youwon'thaveto

enteryourusernamenexttime.

Thissteponlyappliesthefirsttimeyoulogontoadevice'sbrowser.

5 Loginwithverificationcode:makeyourchoice

We'llcheckyouraccountagainstaverificationcodethatwe'llsendyou.Howwedothis,youchoose:

• bytextmessage:we'regonnaneedyourcellphonenumber.

• viaalternativeemailaddress:weneedanemailaddressthatisdifferentfromtheaddressassociatedwithyourusername.

• Viaanauthenticator-appi:itispossiblethatyoualreadyinstalledandconfiguredanauthenticator-appforotherapplications.IfyoualsoconfigureditforyourInfrabelaccount,youcannowuseit.

Ifyouhaveneverloggedinwithasecondfactorbefore,weneedextradata,andyouwillhavetoenteritinthenextstep.

Ifyousignedupearlierwithasecondfactor,youcanonlychooseanoptionthatisalreadyknowntous.Hereweexplainhowtosetotheroptions.

6







�18

7 Completedataifnecessary

Thisstepisoptionalandwillonlybeshownif,fortheoptionyouchose,wedon'thaveanydatayet.Followtheinstructionthataccompaniesyourchoice:

• YouchoseSMSore-mail

Enteryourmobilephonenumberoranalternativee-mailaddressasrequested.Thismustbedifferentfromtheaddressassociatedwithyourusername.Infrabelwillonlyusetheinformationprovidedforthesecurityofyouraccount.Youcanalwaysdeleteyourdataatalaterdate:seehowtodothishere.

• Youchoseauthenticatorapp

Ifyouwanttoreceivetheverificationcodeviaanauthenticatorapp,youcanseeherehowtoperformtheinstallationandconfiguration.Werecommendthatyoudothisbeforesigninguptoanapplication.

7a

7a

7b






�19

8

8 Enteryourverificationcode

Enterthecodeyoureceived(viaemail,SMS,oryourauthenticatorapp).

Tip:whenusingtheoption"sms"youcancopythecodefromthetextinyourkeyboard.OnIphonedevices,youneedtoclickontheverificationcodefieldbeforeyoureceivethetextmessage.Youshouldreceivethetextmessageande-mailwithinaminute.Ifnot,youcanrequestanewcode(seelinkonthescreen)

You'resignedup!

8






�20


2 Enteryourpassword

Choosehowwesendyoutheverificationcode

ViaSMS,e-mailoranauthenticatorapp

Getthecode Openthetoolonwhichyoushouldreceivethecodeandcopyorrememberthecode

Enteryourverificationcode Enterthecodeyoureceived(viaemail,SMS,oryourauthenticatorapp).

You'resignedup!

Nextsign-upswithout//Accountapp

1

2

3

1

2 5

SMS

EMAIL

AUTHAPP

3

4

4

5

Ifyouopenanapplicationonthesamedeviceandthesamebrowser(withouterasingthebrowser'smemory),yougetthefollowingbenefits:

• Thesystemstillknowsyourusername(soyoudon'thavetoenteritanymore)• Thesystemremembersyourlastverificationmethod(soyoudon'thavetochooseitanymore):






�21


Youchooseanothermethod Thiscanbedoneviathetabsontheleftoratthebottom.Orbyclickingon"//Account". Attention,foranothermethodyouneedthe//Accountapp!

Someoneelseloggedontoyourphone

Registeryourselfviathelink<yourusernameorviathepeopleicononmobile

a

a

b

b

�22

Youwanttochangeauthenticationmethodoruser






a

<yourusername

Generalinstructions

�23







InstallationonanInfrabelregisteredmobiledevice(MDM)

InstallationoftheMicrosoftAuthenticatorhasalreadybeenperformedautomaticallyonthisunit(viatheCompanyPortal).

Installinganauthenticatorapponyourdevice(s)

▪ OpentheGooglePlayStore(Android)orAppStore(iPhoneoriPad)

▪ Browseorsearchforanappwiththesearchterm"Authenticator"andtap"Install"assoonasyoufindtheappyoulike.

▪ YoucanalsoscanthefollowingbarcodestoinstalltheMicrosoftauthenticatorappdirectly

�24






ConfiguringyourInfrabelaccountintheauthenticatorapp(onedevice)

�25

1 Findyoursecretkey

Toconfiguretheappyouwillneedyourusernameandsecretkey.• Openthislinktomanageyourdatahttps://account.infrabel.be.• Yousigninlikeanyotherapplication• ClickonNewverificationmethod• ChooseVerificationviaanauthenticatorapp

Atthebottomofpoint2youcanseethesecretkey.YougetthisintheformofaQRcodeandintext:

(yourusername)

1b

1a

1a

1b




ConfiguringyourInfrabelaccountintheauthenticatorapp(onedevice)

�26

2 AddyourInfrabelaccountintheauthenticatorapp

Everyappisdifferent.Searchfor"addaccount",or"+"orsomethingsimilar.ThenscantheQRcodewithyourmobiledevice,oraddtheinformationmanually.BelowisanexampleofMicrosoft'sauthenticatorapp

Yourverificationcodeappears: Copyitandyou'redone!

OnceyouhaveaddedyourInfrabelaccount,youwillseeacodethatchangesfrequently.Youcanusethiscodetoconfirmyouraccount. Youmustenterthecodewithin30seconds.

(yourusername)

+

2

2

3

3

(yourusername)

762302




ConfiguringyourInfrabelaccountintheauthenticatorapp(multipledevices)

▪ Youcaninstallthesameordifferentauthenticatorappsondifferentdevices.Onlydothisondevicesthatyouusealone.

▪ Thisisonlypossibleifyoudotheconfigurationatthesametime. Todoso,followthesamestepsasononedevice,andrepeatthemoneachdevice,eachtimeusingthesamesecretkey(orscannedQRcode) Theconfigurationwentwellifeachauthenticatorappgeneratesthesamecodeatanytime.

▪ HaveyoualreadyconfiguredanauthenticatorappononedeviceandwouldyouliketoconfigureoneonanotherdeviceforyourInfrabelaccount? Thatispossible.Heretoo,youmust(re)executetheconfigurationatthesametime.

�27




1 Wherecanyouperformtheseactions?

GotothisURLtomanageyourdatahttps://account.infrabel.be.ORClickon"Managemyauthenticationmethods"fromthe"Gettingstarted"sectiononthehelppages.

2 Signupfor Yousigninlikeanyotherapplication

�28

Youcanchangeanddeletethepreviouslyentereddataaboutyouraccount.Youcanalsoaddnewmethodstostrengthentheprotectionofyouraccount.Inaddition,withdifferentauthenticationmethodsconfigured,youcanalwayschooseadifferentmethodandchangethisdata.Forexample,if• ashiftistemporarilynotworking;• ifyouloseyourphone;• orifyourdatachanged.

Youcanalsoconsultyourapplicationactivities


Doyouwanttobeabletoresetyourpasswordifnecessary?ThisispossibleifyouconfigureboththeSMSande-mailmethodshere.

https://account.infrabel.be/




Deleteaverificationmethod Youcandeleteyourphonenumber,analternativeemailaddressoranyotherauthenticatorappbyclickingonthe"-"button.

Addanewverificationmethod Clickon"Newverificationmethod".Choosetheverificationmethodtoadd

• textmessageore-mail Enteryourmobilephonenumberoranalternativee-mailaddressasrequested.Thismustbedifferentfromtheaddressassociatedwithyourusername.

Thisactionreplacesthesettingofyourcurrentdata

Enterthecodeyoureceived(viaSMSore-mail).

• authenticationapp Seeherehowtodotheinstallationandconfiguration.OnceyouhaveaddedyourInfrabelaccount,youwillseeacodethatchangesevery30seconds.Withthiscodeyoucanconfirmyouraccount.

Congratulations,youraccountissecure

�29

3a

3b

3a

3b

3b




�30


Changepassword

YoumustchangeyourpasswordwithinthespecifiedtimelimitinordertomaintainyouraccesstotheInfrabelapplications.Tothisend,youwillreceiveane-mailattheappropriatetimeinvitingyoutochangeyourpassword.

EitheryouareconnectedwithintheInfrabelnetwork(attheofficeorwithVPN)

YoucanchangeyourpasswordbypressingtheCtrl+Alt+DeletekeysatthesametimeinWindows10.Choosetheoption"Changeapassword".OnthispageyouwillfindallthetipsforInfrabelemployeestochooseasecurepassword.

HasyourpasswordalreadyexpiredorareyounotconnectedtotheInfrabelnetwork?

a. Signintoyourlaptopwithyouroldlogindetails(oldpassword),donotconnecttotheVPNandchangeyourpasswordviathispage.

b. ForInfrabelstaff:assoonasyoureconnecttotheInfrabelnetwork,apop-upwillaskyoutoenteryournewlogindetails.Donotforgettoupdatethepasswordsofyourapplications,yourmobilephone/martphoneandyourtablet,ifyouhavethem.

https://intranet.infrabel.be/sites/ictmanuals/NL/Password/Paginas/Home.aspx

https://claim.infrabel.be/adfs/portal/updatepassword




�31

Resetpassword

Haveyouforgottenyourpassword?

Ifyoudon'tknowyourpassword,therearetwopossibilities:

• oryoupreviouslysetupMFAandprovidedyourcellphonenumberandanalternativee-mailaddress.Thenyoucanresetyourpasswordyourselfviathislink.

• oryouhaven'tyet.Inthatcaseyouhavetocontactthehelpdesk.ThenconfigureyourGSMnumberandanalternativee-mailaddressviathislinksothatyoucanresetityourselfnexttime.

https://accounts.infrabel.be/nl/ResetPassword

https://account.infrabel.be/

foreword - infrabel · 2020. 7. 22. · an authenticator app is an app that generates (temporary)...

Documents