Multi-Factor Authentication for IDMS

The Gramm-Leach-Bliley Act requires financial institutions – companies that offer consumers financial products or services like loans, financial or investment advice, or insurance – to explain their information-sharing practices to their customers and to safeguard sensitive data.

The Privacy Rule applies to car dealers who:

Extend credit to someone (for example, through a retail installment contract) in connection with the purchase of a car for personal, family, or household use;
Arrange for someone to finance or lease a car for personal, family, or household use; or
Provide financial advice or counseling to individuals.

IDMS is being upgraded with multi-factor authentication to be GLBA compliant. The training guide details on the changes on various login and other flows.

First time Login to IDMS

The below steps must be carried out when an existing user tries to log into IDMS for the very first time after the feature is turned on

1. Enter the URL https://idms.dealersocket.com/ on your browser

2. Enter the email associated with your username and click on Login button

3. Enter your existing password and click on the Sign in button

4. Select a method to perform Multi-Factor Authentication.

While you can pick only one of the two methods, we recommend selecting both authentication methods.

Selecting both methods gives you more options in the case that one of the methods stops working for some reason.

5. Enter the country and phone number when SMS/Text is used as the MFA option.

6. Capture the code received. A success message is received if the code has been verified successfully

7. Scan the QR code on the screen when the Authenticator App has been selected as a method for Multi-Factor Authentication and enter the code then click the Continue button.

On successful configuration the user is directed to the IDMS home /default landing page

Subsequent Logins to IDMS

The below steps must be carried out when an existing user tries to log into IDMS post configuring the MFA

1. Enter the URL https://idms.dealersocket.com/ on your browser

2. Enter the email associated with your username and click on Login button

3. Enter your existing password and click on the Sign in button

4. Select a method to perform Multi Factor Authentication

5. Enter the code based on the Authentication method selected and click the Verify code.

You will be redirected to the IDMS home page /default page once the authorization is confirmed.

6. Click Log Out to end the session and be redirected to the Login Page

Create a New User

The below steps must be carried out when a new user is created on IDMS

1. Navigate to Settings > Users page

2. Click on the Add icon to create a new user.

3. The system will prompt you to save changes when the user exists on the Identity server.
However, when the user does not exist on the Identity server, a prompt will not be presented.

An email will be sent to the registered email with a link to activate the user and configure a multi-factor
authentication method and a password.

4. Click the link to be directed to the IDMS login page.

5. Enter the email associated with your username and click the Login button

6. Click the Send Verification Code button to receive a code to Authenticate.

7. Type the password in the New Password field.

8. Type the password again in the Confirm New Password field.

9. Type the Display Name, Given Name, and Surname, then click the Accept button..

When the validation is successful, you will be redirected to the next page.

On successful validation, you will land on the page to configure the MFA options.

10. Click on the SMS Text or Authenticator App checkbox and click the Continue button.

While you can pick only one of the two methods, we recommend selecting both authentication methods.
Selecting both methods gives you more options in the case that one of the methods stops working for some reason.

11. Enter the country and phone number when using the SMS/Text as the MFA option.

12. Click the Send Verification Code button.

13. Enter the code received and click the Verify code button.

A success message is received when the code has been successfully verified.

14. Scan the QR code on the screen when the Authenticator App has been selected as a method for
Multi-Factor Authentication.

15. Once received, enter the code and click the Continue button.

15. Upon successful configuration, you are directed to the IDMS home /default landing page to accept the Terms of Agreement.

Reset Multi-Factor Authentication

The below steps must be carried out when an existing user needs to reset the Multi-Factor Authentication methods.

1. Navigate to Settings > Users page.

2. Search for the user whose Multi-Factor Authentication is required to be reset.

3. Click on the Icon to Reset Multi-Factor Authentication

4. Click the Yes button to confirm the action.
OR
Click No to cancel the action.

The Success message displays when the Multi-Factor Authentication has been successfully reset.

An Error message is displayed when Multi-Factor Authentication options are not set for the user.

5. Navigate to the Login screen and type in the username.

6. Type in the Password and click the Sign in button.

Upon successful validation, you will land on the page to configure the MFA options.

7. Click on the SMS Text or Authenticator App checkbox and click the Continue button.

While you can pick only one of the two methods, we recommend selecting both authentication methods.

Selecting both methods gives you more options in the case that one of the methods stops working for some reason.

8. Enter the country and phone number when using the SMS/Text as the MFA option.

9. Click the Send Verification Code button.

10. Enter the code received and click the Verify code button.

A success message is received when the code has been successfully verified.

11. Scan the QR code on the screen when the Authenticator App has been selected as a method for Multi-Factor Authentication.

12. Once received, enter the code and click the Continue button.

Reset /Change the Password

The below steps must be completed when an existing user wants to reset the password for another user.

1. Navigate to Settings > Users page.

2. Search for the user whose password needs to be reset.

3. Click on the Icon to reset Multi-Factor Authentication.

A password reset link is sent to the user’s registered email.

4. Click the link on the email to be redirected to the Solera branded page to verify the user’s identity.

5. Copy the verification code from the email and click the Continue button when the code has been verified successfully.

6. Select a method to perform Multi-Factor Authentication.

7. Type the code in the field and click the Verify button.

8. Type a New Password and Confirm New Password.

9. Click the Continue button.

Upon successful password reset, the user is directed to the IDMS home /default landing page.

Resend Invitation

The below steps must be completed when an admin user wants to resend the invitation link to a newly
added user in IDMS.

1. Navigate to Settings > Users page.

2. Search for the user to whom the invitation link needs to be resent.

3. Click on the Icon to resend the invitation.
Note: The resend invitation icon is enabled when the user has not been activated. Once activated, the icon is set in a disabled state.

4. An invitation link is sent across to the registered email

Self-Serve Change Password

The below steps must be completed when a user wants to reset their password.

1. Click the Change Password option on the IDMS landing page.

2. Click on the SMS Text or Authenticator App checkbox and click the Continue button.

While you can pick only one of the two methods, we recommend selecting both authentication methods.

Selecting both methods gives you more options in the case that one of the methods stops working for some reason.

3. Enter the country and phone number when using the SMS/Text or Scan the QR code on the screen
when the Authenticator App has been selected as the MFA option.

4. Click the Send Verification Code button.

5. Enter the code and click the Verify button.

6. Enter the Current Password, New Password, and Confirm New Password and then click the Continue button.

7. When the password reset is successful, the user is directed to the IDMS home /default landing page.

Forgot Password

The below steps must be completed when an existing user has forgotten their password and wishes to reset it
themself.

1. Enter the email id on the IDMS login Page

2. Click the Forgot your password link on the Solera branded page.

3. Click the Send verification code button to obtain a code in the registered email.

4. Enter the code received on the registered email and click the Verify Code button and then click the Continue button.

5. Click on the SMS Text or Authenticator App checkbox and click the Continue button.

While you can pick only one of the two methods, we recommend selecting both authentication methods.

Selecting both methods gives you more options in the case that one of the methods stops working for some reason.

6. Enter the code from the email and click the Verify button.

7. Type a New Password and Confirm New Password and click the Continue button.

8. Upon successful password reset, the user is directed to the IDMS home /default landing page.

Reset Multi-Factor Authentication for MY FEX Users

The below steps must be completed when a MY FEX PAY user wants to reset the Multi-Factor Authentication methods.

1. Navigate to the Account using the Account Search option.

2. Click on the icon to reset MFA or click on the RESET MFA button on the Action tab.

3. From the list of emails associated with the account, click on the icon to reset Multi-Factor authentication.

When the Multi-Factor Authentication is reset successfully, a success message is shown on the screen;
otherwise, a failure message will be shown asking you to retry the action again after some time.

The MY FEX PAY user can now reset their Multi-Factor Authentication methods by logging into the MY FEX PAY application.