SPSRM MFA User Guide.pdfhttps://www.spgroup.com.sg/dam/jcr:2f1e962e-406e-4d3a-a9bf-9a604fc85270/SPSRM%20MFA%20User%20Guide.pdfSPSRM MFA User Guide - Version 1.01 (Jan 2023) ____________________________________________________________________________________ SPSRM Multi Factor Authentication User Guide ____________________________________________________________________________________ SPSRM MFA User Guide - Version 1.01 (Jan 2023) TABLE OF CONTENTS 1. General Information ............................................................................................................................................ 4 2. System Requirements ......................................................................................................................................... 4 3. Installing the SAP Authenticator App ............................................................................................................. 5 4. Log on to MFA Registration ............................................................................................................................... 6 4.1. Log on to MFA Registration .............................................................................................................. 6 4.2. Select Set Up Account on Device .................................................................................................... 7 5. Mobile Device Set Up .......................................................................................................................................... 8 5.1. Log on to MFA Registration .............................................................................................................. 8 5.2. Password for SAP Authenticator APP ............................................................................................ 9 5.3. Add Account .......................................................................................................................................10 5.4. Enable Scan QR Code Function ......................................................................................................11 5.5. Install QR Code/Bar Code Scanner App (For Android Phone Only) .....................................12 5.6. Use Mobile Device to Scan QR Code on Work Computer ......................................................13 5.7. Enter Confirmation Code.................................................................................................................14 5.8. Completion of set up ........................................................................................................................15 6. Accessing SRM Portal with MFA .....................................................................................................................16 6.1. Enter Credentials (User ID and Password)..................................................................................16 6.2. Obtain Passcode from SAP Authenticator App .........................................................................16 6.3. Enter Passcode ...................................................................................................................................17 7. Set Up Another Mobile Device (Optional)...................................................................................................18 7.1. Install App and Log on to MFA Registration Page ....................................................................18 7.2. Enter Passcode ...................................................................................................................................19 7.3. Mobile Device Setup ........................................................................................................................20 7.4. Log On to SRM Portal .......................................................................................................................20 8. Second Account MFA Registration On Same Mobile Device (Optional) .............................................21 8.1. Launch SAP Authenticator App .....................................................................................................21 8.2. Add New Account ..............................................................................................................................22 2 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) 8.3. Select Account to Display Passcode .............................................................................................22 9. Disable and Delete MFA Registered Account On Mobile Device (Trouble-shooting)......................23 9.1. Disable Account .................................................................................................................................23 9.2. Deleting account from Mobile Device .........................................................................................26 10. FAQs ......................................................................................................................................................29 3 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) 1. General Information Multi Factor Authentication (MFA) is a security feature for the SP Group Supplier Relationship Management System (SRM Portal) that requires users to provide two verification factors to gain access the SRM Portal. In addition to the standard User ID and Password, users will also be required to enter the passcode that is obtained from the MFA application installed in their mobile device. 1.1. Purpose Of User Guide This document is intended to guide users on the following: • How to install the required MFA application - SAP Authenticator App • How to set up SAP Authenticator App on your mobile device • How to log into SRM Portal using the SAP Authenticator App • Troubleshooting issues that may be encountered 1.2. SPSRM Portal URL URL to SPSRM Portal: https://srm.spgroup.com.sg 1.3. Contact Us If you have any enquiries, please contact us at: SRM Support Telephone: 65 6916 8839 E-mail address: srmsupport@spgroup.com.sg Operating hours (Singapore Time): - Mon to Fri: 8:30am to 12:30pm; 1:30pm to 5:00pm - Closed on Sat, Sun & Public Holidays 2. System Requirements The following are required to access and perform activities on SRM portal with the MFA activated: • Mobile Device (IOS or Android) • Internet connection • Computer with the following web browser: o Windows Operating System: Edge or Chrome o Mac Operating System: Safari • Browser settings: o Pop-up blocker must be disabled/turned off o Zoom is set to 100% 4 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) 3. Installing the SAP Authenticator App Download and install the SAP Authenticator App on your mobile device, the App can be found in APP Store for iOS device and Google Play Store for Android device. IOS (App Store) Android (Google Play) Scan below QR code for IOS device Scan below QR code for Android device 5 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) 4. Log on to MFA Registration 4.1. Log on to MFA Registration Use your work computer to access the SRM Portal at URL: https://srm.spgroup.com.sg. Click on the link for MFA Registration as shown. Click Here Enter the User ID and Password and click Log On. Notes: If you are a new user accessing the SRM Portal for the FIRST time, please refer to the FAQ section Question 8 for details on how to get your User ID and Password. 1. Enter User ID 2. Enter Password 3. Click on Logon 6 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) 4.2. Select Set Up Account on Device At the Mobile Device setup page, click Set up Account on Device. Click Here When you see the screen below, switch to your mobile device installed with the SAP Authenticator App and follow the next steps. 7 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) 5. Mobile Device Set Up 5.1. Log on to MFA Registration Access to your mobile device and launch the SAP authenticator App. Tap on the Start Setup button. IOS Device Android Device 8 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) 5.2. Password for SAP Authenticator APP Default App Password setting is ON - This requires you to setup and use a separate password to launch the SAP Authenticator App. If you do not wish to use a separate password to launch the SAP Authenticator App, please switch this setting to OFF. IOS Device Android Device 2. Tap OK This Status is ON. Tap here, it will set to OFF This Status is ON. 1. Tap here, it will set to OFF 9 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) 5.3. Add Account Tap on the Add Account button. IOS Device Android Device 10 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) 5.4. Enable Scan QR Code Function IOS Devices: Switch selector to ON to enable scan the QR code and tap OK to allow access to camera. Android Devices: Tap Scan QR code and (if necessary) tap Yes to install Barcode Scanner. IOS Device Android Device This status is OFF, click it to enable Scan QR Code Tap Scan QR Code IOS Device Android Device Tap Yes Tap OK 11 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) 5.5. Install QR Code/Bar Code Scanner App (For Android Phone Only) Go to Google Play store to install QR Code/Bar Code Scanner App if your Android device does not have any Bar Code Scanner App installed. Android Device Step 1 Step 2 Install a QR Code/Bar Code Scanner from google Play Install a QR Code/Bar Code Scanner from google Play Tap Install Scanner get installed when you can see Open 12 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) 5.6. Use Mobile Device to Scan QR Code on Work Computer Use your mobile device to scan the QR code displayed on your work computer’s Set Up Account on First Device page from paragraph 4.2 above. IOS Device Use Mobile device to scan the QR code displayed on laptop or PC. Android Device Use Mobile device to scan the QR code displayed on laptop or PC. 13 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) 5.7. Enter Confirmation Code Enter the Confirmation Code from your work computer’s Set Up Account on First Device page from paragraph 4.2 above. Tap on Done / Confirm. IOS Device 2. Tap Done 1. Enter Conformation Code Android Device 1. Enter Conformation Code 2. Tap Confirm 14 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) 5.8. Completion of set up You should be able to see a 6-Digit Passcode on the SAP Authenticator App which can be used to log into SRM Portal. IOS Device Android Device Switch to your work computer and click Finish button to complete the set up of MFA feature for your SRM account. Click Here to Finish the Set Up 15 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) 6. Accessing SRM Portal with MFA 6.1. Enter Credentials (User ID and Password) Enter your User ID and Password and click on Log On. 1. Enter User ID 2. Enter Password 3. Click on Logon 6.2. Obtain Passcode from SAP Authenticator App Launch SAP Authenticator App on your registered mobile device to obtain the Passcode. IOS Device Android Device 16 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) 6.3. Enter Passcode Enter Passcode in SRM Portal and click Log On. 1. Enter Passcode 2. Click on Logon k on Logon You are now logged in successfully. Notes: The Passcode will refresh every 30 seconds. Warning: Please DO NOT DELETE the SAP Authentication App in your mobile after registered successfully, you are required to Re-register again if so. 17 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) 7. Set Up Another Mobile Device (Optional) 7.1. Install App and Log on to MFA Registration Page If you want to set up a second or additional mobile device, you can do so by repeating steps from Section 3 on the new mobile device. Use your work computer and follow the steps in Section 4 to arrive at Set Up Account on Additional Device page as shown below. You will now need to switch to the First or any other previously registered mobile device to continue. 18 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) 7.2. Enter Passcode Open the SAP Authenticator App from the previous registered mobile device (Not the new device to be registered). Enter the Passcode displayed on App and click Submit. IOS /Android Device Previous Registered Device Enter Passcode and Click Submit A QR Code will be enabled for scanning. 19 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) 7.3. Mobile Device Setup Use the new device and repeat the steps in Section 5 to complete the set up. 7.4. Log On to SRM Portal The new device can now be used to generate the Passcode to log into SRM Portal following the steps in Section 6. 20 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) 8. Second Account MFA Registration On Same Mobile Device (Optional) If you want to set up a second account MFA Registration on the same mobile device, you can do so by repeating steps in Section 4 - Log on to MFA Registration. Thereafter, please continue with the following steps 8.1. Launch SAP Authenticator App Launch SAP Authenticator App on your mobile device, you will be routed to Passcode screen directly. Tap Back. IOS /Android Device Tap Here Tap on Edit to enable adding New Account. IOS /Android Device Tap Here 21 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) 8.2. Add New Account Tap on to go to QR scan page. IOS /Android Device Tap Here You can repeat steps from Section 5.4 - Enable Scan QR Code Function to complete the additional account. 8.3. Select Account to Display Passcode When logging into SRM Portal, you will need to select the particular account you are using to generate the Passcode for that account. Tap on User ID under Accounts to display the Passcode. IOS /Android Device Select the Account Tap Here 22 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) 9. Disable and Delete MFA Registered Account On Mobile Device (Trouble-shooting) If you want to disable or delete your MFA Registered Account, please start with your laptop/work computer. You can do so by repeating steps in Section 4.1 - Log on to MFA Registration. Thereafter, please continue with the following steps. 9.1. Disable Account Click the Disable Account option on the Mobile Device Setup page. Click Here Warning: Disable Account affects ALL mobile devices that have been registered for that account 23 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) You will now need to enter the Passcode obtained from any mobile device registered for that account. Open the SAP Authenticator App from a registered mobile device. Enter the Passcode displayed on App and click Disable Account. The Registered Device IOS /Android Device Enter Passcode and Click Disable Account Disable account will affect all devices registered against this user ID. Remember to delete account (user entry) from mobile devices after account disabled. Click Yes to confirm disabling the account on all devices. Click Here 24 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) Account is now successfully disabled. The account can be deleted from all devices. 25 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) 9.2. Deleting account from Mobile Device Launch SAP Authenticator App on your mobile device, you will be routed to Passcode screen directly. Tap Back. IOS /Android Device Tap Here Tap on Edit to enable delete account. IOS /Android Device Tap Here Tap on CUT_CG_MPX). to delete the account (In this example we are deleting account IOS /Android Device Tap Here 26 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) Tap on Delete button. IOS /Android Device Tap Here Confirm Remove Account, tap OK to proceed. IOS /Android Device Tap Here 27 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) Account is removed from mobile device, tap Done to complete deletion process. IOS /Android Device Tap Here Notes: Post deleting MFA Registered Account, Passcode from existing device is no more useful, Warning message: Wrong Passcode. 28 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) 10. FAQs Question 1: How do I transfer my MFA App to a new mobile device if I still have access to the previous registered mobile device or another registered device? Answer: You need the registered mobile which have access to the Passcode (From SAP Authentication App) ready, use this Passcode and Set Up Account on Additional Device (new mobile device). Refer to Section 7 - Set Up Another Mobile Device. Question 2: If I start to use a new mobile device without my previous registered mobile device, and have no more access to SAP Authentication App, how should I get the MFA App Passcode? Answer: In case loss of Device or Device is not working, please contact SRMSUPPORT@SPGROUP.COM.SG, SPSRM Admin Team will disable user previous registration (applicable to all registered devices if more than one), so that user can re-register with the new device. Question 3: If the SAP Authentication App was removed from my device accidently, how should I get the Passcode? Answer: If you have another registered device that can access the Passcode, please refer to Question 1. If that is your only device, you would have to re-register the MFA account with your mobile device. Refer to Section 3, Section 4, and Section 5. Question 4: Is it a must to disable account before delete it in the mobile App, can we just delete the App from the mobile? Answer: It’s always recommended to follow steps of disable account, delete the account and remove the App from the phone if you want to remove the access completely from the particular phone. Question 5: If the Contact Person account has been locked by the Authorised Representative after having registered MFA on their mobile device, would the Contact Person account still have access to SRM Portal and the SAP Authentication App? 29 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) Answer: The Contact Person will still have access to the SAP Authentication App but would no longer be able to login to the SRM portal. Question 6: Can I use multiple mobile devices to scan the same QR code appeared in Work Computer at the same time? Answer: No, the QR code appeared in Mobile Device Setup Page is for single device usage. Question 7: What if the SAP Authentication App is not displaying Passcode or is not functioning correctly? Answer: In such instance, please contact SRMSUPPORT@SPGROUP.COM.SG Question 8: What if I am new user to SRM Portal, how do I get my user ID and Password? Answer: Please submit your bidder registration if you have not done so. You can refer to SPSRM Supplier Registration Guide. Upon approval granted, the contact person registered in Bidder registration will receive two separate emails with Login ID and password respectively. Question 9: What if I forgot my user ID or Password, or both? Answer: If you forgot Password, you can reset the password by access the URL https://srm.spgroup.com.sg to SRM Portal, on the homepage, click Password/UserID Reset. Click Here 30 / 31 SPSRM MFA User Guide - Version 1.01 (Jan 2023) If you forgot your User ID, and hold Authorised Representative Account, please send e-mail to srmsupport@spgroup.com.sg with the Authorised Representative’s e-mail address containing: If you hold Contact Person Account, your company Authorised Representative account possesses administrator rights to retrieve all Contact Persons created for the Company. You can approach the AR for the reset. Please refer to SPSRM User Guide (Resources – Procurement – SPSRM User Guide - Section 5.2.3) Question 10: How do I disable pop-up blocker? Answer: Chrome: Edge: 31 / 31