| Note |
|---|
This page provides a step-by-step guide for signing in to a new OpenCCC Account. |
Sections:
| Note |
|---|
This page provides a step-by-step guide for signing in to a new OpenCCC Account. |
Sections:
| Table of Contents | ||
|---|---|---|
|
...
| Note |
|---|
For security purposes, two-factor validation is used to verify (authenticate) your identity. A time-sensitive security code is sent to the user to their preferred method of contact. The code must be retrieved and entered within 10 minutes of request to validate the user’s identity. Below is an example of the verification code message received by email. |
...
by email. |
...
Steps in the Sign In Process
Step 1: Enter email or mobile number on Sign In page.
Step 2: Enter password or follow the validation process.
Step 1: Sign In Page
All users start on the Sign In page.
...
| Warning |
|---|
Your Sign In Credential is Not Found. If the system doesn’t recognize the credential entered, the user will still be taken to the Password page and prompted to enter their secure password. If the password entered is not recognized, the user is returned to the Sign In page to try again or click the Recover Account link. |
Step 2: Sign In Validation
...
If Your Email Address or Mobile Number IS Unique
If the email address or mobile phone number used matches a verified, unique account in the system, the Password page is displayed and the user is prompted to enter their secure password. From a user experience, this is known as the “happy path” and will apply to the majority of users after creating their account to the new system.
...
The Password page is displayed. Enter your secure password in the input field.
Click “Sign In” to continue to your destination application.
...
If Your Email or Mobile Number is NOT Unique (Duplicate)
| Note |
|---|
While user sign in credentials must be unique to an individual, it is possible that an attribute (email or phone) was being shared with a family member in the legacy system. When this happens, the individual who signs in and validates the attribute first will take ownership of that attribute and it will be unique to their account. Any subsequent attempts to use that attribute by another user will prompt the duplicate account process described below. |
...
If the email address or mobile phone number used for sign in is not a unique match to an account found in the system, another user has already validated that specific attribute in the new system. The system will display the Username page.
...
If the system detects that the email or mobile number provided is a duplicate in the system, the Username page is displayed.
Enter your legacy Username in the input field. Click “Next” to go to the Password page.
Enter your secure Password in the input field. Click “Sign In” to validate.
At this point, the system is queried using the email or mobile number, username, and password to try to identify the user.
If the system cannot find a match, the user can:
...
to validate.
At this point, the system is queried using the email or mobile number
...
Click the Forgot your password? link.
...
, username, and password to try to identify the user.
If the system finds cannot find a match to the account, the system then looks to see if the attribute is then Validation Code page is displayed and a security code is sent to the user via the email or mobile number they entered.
The user must obtain their six-digit security code from their email or mobile phone device.
Return to the Validation Code page and enter the code in the input field. Click “Next” to validate the account.
The Update Password page is displayed. The user must reset their password with a new string of characters that meet the security requirements displayed.
Click “Update Password” to save password.
The user is auto-directed and auto-logged in to their original destination application.
| Tip |
|---|
Once a user successfully validates their account, the system will advise the user that this method should be used for future sign in. |
| Warning |
|---|
error message and will be prompted to 1) use the other method; or 2) enter an alternate email or phone number that can be validated using the Verification process. |
How will the user know if the credential used is not unique (duplicate)?
If the email address or mobile phone number entered is not unique, an error message displays like the one shown below.
Example Workflow:
On the Sign In page: the user enters her email address.
The validation service finds the email address is being associated with two or more accounts. Error message is displayed.
User has several options:
Change the preferred method of contact and enter a new unique attribute. (ex: select Use email instead or Use mobile phone instead.)
Click on the Recover Account link to get help recovering your sign in credentials or password.
The system should check the users password to see if a password reset is required.
...
If password reset is not required, user should be auto logged in and proceed to where they need to go.
...
user can:
Retry the process by re-entering the email or mobile number, or try another email or mobile number. The system will query for status.
Click the Recover Account link on the Sign In page.
Click the Forgot your password? link on the Password page.
Contact the Helpdesk for support.
If the system finds a match to the account, the user is prompted to validate their email or mobile number.
The Validation Code page is displayed and a security code is sent to the user via the email or mobile number they entered.
...
2. The user must obtain their six-digit security code from their email or mobile phone device.
...
3. Enter the security code on the Validation Code page in the input field.
4. Click “Next” to validate the account.
| Tip |
|---|
Once a user successfully validates their account, the system will advise the user that this method should be used for future sign in. |
5. The Update Password page is displayed. The user must reset their password with a new string of characters that meet the security requirements displayed.
...
6. Click “Submit” to save password.
7. The user is auto-directed and auto-logged in to their original destination application.
Confirm this with Matt:
On the Sign In page: the user enters her email address.
The validation service finds the email address is being associated with two or more accounts. Error message is displayed.
User has several options:
Change the preferred method of contact and enter a new unique attribute. (ex: select Use email instead or Use mobile phone instead.)
Click on the Recover Account link to get help recovering your sign in credentials or password.
If Your Email or Mobile Number is Not Validated
If the system detects that the email address or mobile phone number used to sign in has not been validated, the user will be directed to the Password page and prompted to enter their password. If the password is identified, the user will be authenticated but required to validate the attribute they used to sign in.
| Note |
|---|
Reminder: Sign in credentials must be unique to an individual and validated to verify the individual’s identity. |
How will the user know if their sign in credential has not been validated?
If the email address or mobile phone number entered is not unique, an error message displays like the one shown below.
...
Steps:
After entering an email or mobile number on the Sign In page:
The Password page is displayed. Enter your secure password, then click “Sign In”. Enter your secure password in the input field.
Take a moment to save your password.
Click the Sign In button to continue.
...
| Warning |
|---|
Forgot Your Password? If you forgot your password, or if the system can’t find your password, click the Forgot your password? link to validate a new one. |
The user has been authenticated but must
...
validate
...
their sign in attribute before
...
being directed to their destination
...
application.
4. The Validation Code page is displayed with the following message:
...
“We were able to locate your account. Enter the verification code sent to [partially masked email]. If you didn’t get the [email], check your junk folder or resend or try again
...
4. The system sends the user an email with a time-sensitive security (validation) code.
...
5. Return to the Validation Code page and enter the six-digit security code in the Validation Code input field.
6. Click “Next” to continue.
7. The user is taken to the Edit Profile page to confirm that the attribute has been validated and verified. The user can then accept the attribute as the Preferred Method of Contact, or choose to verify a valid mobile phone number as the preferred method.
If Your Email or Mobile Number is Not Found
...
Step 2: Enter Your Secure Password
Users are required to enter a valid password in order to sign in.
Steps:
In the Password input field, enter your secure password.
Take a moment to save your password.
Click the Sign In button to continue.
...
.”
...
5. The system sends the user an email with a time-sensitive security (validation) code.
...
6. Enter the six-digit security code in the input field on the Validation Code page.
7. Click “Next” to continue.
The user is taken to the Edit Profile page to confirm that the attribute has been validated and verified. The user can then accept the attribute as the Preferred Method of Contact, or choose to verify a valid mobile phone number as the preferred method.
...
If Your Email or Mobile Number is Not Found
...
...
User Flow: Sign In Process
...