eAuthentication Employee Rollout

1
\
U.S. Department of Agriculture eGovernment Program

• eAuthentication Employee Rollout
• Agency Employee Registration Leads

2
eAuthentication Employee Registration Leads
NASS - Sylvia Magbanua National Appeals Division
- Janet Robertson NRCS - Wanda Bryant, Cassandra
Taylor OBPA - Connie Rubin, Jackie Parton OCFO -
Mike Zeringue, Gail Rousseve OCIO Owen Unangst,
Janet Guyer Office of Chief Economist Milton
Ericksen Office of Communications - Debbie
Fleshman, Wayne Moore, Lisa McFerson Office of
Congressional Relations Office of Executive
Secretariat Office of General Counsel Debbie
Vita, Debbie Varga Office of Inspector General -
Elenora Battle RD - Deborah Johnson, Tom Dickson,
Rose King RMA - Sally Relyea, Bill Zillman, Alex
Christensen
AMS Gino Yannotti APHIS Cheryl Johnson, Nancy
Gaucher ARS Jim Neal Civil Rights - Monique
Simmons, Queen Kavanaugh CNPP Larry Blim CSREES
Sally Rockey, Preston Gilmore DA Michael
OConnor ERS - Sandy Suddendorf FAS - Ted
Goldammer FNS Larry Blim, Rick Hargreaves,
Jackie Hawkins FS FSA - Ragh Singh, Jeff Kerby,
Steve Mikkelsen, Lyn Olyphant, Frank Shehan FSIS
- Peggy Nunnery / eAuth_at_fsis.usda.gov GIPSA
David Will
3
The eAuthentication Agency Registration Leads
The designated Agency Registration Lead plays an
important role in the success of the USDA
eAuthentication Employee Registration roll-out.

• The Agency Registration Lead will
• Coordinate the employee eAuthentication
  registration process as defined by their specific
  Agency Implementation Plan
• Coordinate communication of the specified
  registration requirements and processes to their
  Agency employees, Human Resource Staff, and IT
  staff as necessary
• For questions on their role or responsibilities
  Agency Registration Leads can contact the eGov
  Help Desk at 202-720-6144.

4
eAuthentication Employee Self-Registration
To obtain a USDA eAuthentication employee
credential, employees should go to the
eAuthentication web site, where information
entered by the employee will be compared to
payroll and personnel data at the National
Finance Center (NFC).   Employees should feel
assured that the information entered is handled
through secure channels and is used only to
validate the employees identity against
information already known and stored at NFC.
If all of the data entered by the employee
matches the payroll and personnel data held at
NFC, the employee will be electronically issued a
USDA eAuthentication Employee Account credential
(user ID and password) with Level 2 assurance.
 
5
eAuthentication Employee Credentialing Process
(Step 1 of 3 Employment Verification)
6
eAuthentication Employee Credentialing Process
(Step 2 of 3 Account Creation)
7
eAuthentication Employee Credentialing Process
(Step 3 of 3 Account Creation)
8
eAuthentication Employee Credentialing Process
(Explaining the 7 Scenarios)
The eAuthentication Employee Credentialing
process always begins by entering personnel and
payroll data, verifying it, and submitting it for
comparison with NFC personnel and payroll data on
file. After that, seven possibilities exist

• (I) All data entered matches NFC data
• (II) SSN is recognized at NFC, but user has
  typo or other minor discrepancy in other data
• (III) SSN is recognized at NFC, but user has
  significant discrepancy in other data
• (IV) SSN is not recognized
• (V) SSN is linked to an existing
  eAuthentication account
• (VI) An account linked to the SSN is being
  processed
• (VII) Data indicates employee is a Forest Service
  Employee

1. Employee enters payroll and personnel data, then
   clicks Next button.
2. Employee verifies information, then clicks
   Submit button

9
eAuthentication Employee Credentialing Process
(Scenario I Data Entered Matches NFC Data)
3) Account Creation Employee enters
- Userid - Password - e-Mail
- Forgotten password hints
Then, clicks Next button
4) Account Confirmation employee
verifies information, then clicks
Submit button
5) Activation Confirmation Success notice
guidance on e-Mail Verification
6) E-Mail Verification Employee
-Receives e-Mail with final
instructions. -Click this link -
Activate My Account to activate
your account. -Should wait approximately
20 minutes from the receipt of this email before
you can activate your employee account.
Done!
7) Success!
10
eAuthentication Employee Credentialing Process
(Scenario II Data Entered has Perceived Minor
Discrepancy)
3) Account Creation Employee enters
- Userid - Password - e-Mail
- Forgotten password hints
Then, clicks Next button
4) Account Confirmation employee
verifies information, then clicks
Submit button
6) eAuth Team examines info and
determines that manual verification is
possible
5) Activation Confirmation Not
Successful notice guidance of next steps
7) E-Mail Verification Employee
-Receives e-Mail with final
instructions. -Click this link -
Activate My Account to activate
your account. -Should wait approximately
20 minutes from the receipt of this e-Mail before
you can activate your employee account.
Done!
8) Success!
11
eAuthentication Employee Credentialing Process
(Scenario III Data Entered has Significant
Discrepancy)
3) Account Creation Employee enters
- Userid - Password - e-Mail
- Forgotten password hints
Then, clicks Next button
4) Account Confirmation employee
verifies information, then clicks
Submit button
6) eAuth Team examines info and contacts
Employee
5) Activation Confirmation Not
Successful notice guidance of next steps
Info Is Confirmed
Yes
7a) E-Mail Verification Employee
-Receives e-Mail with final
instructions. -Click this link -
Activate My Account to activate
your account. -Should wait approximately
20 minutes from the receipt of this e-Mail before
you can activate your employee account.
No
7b) E-Mail Instruction Employee receives
e-Mail with instructions to update NFC
data (w/ HR)
Start Over
8) Success!
Done!
12
eAuthentication Employee Credentialing Process
(Scenario IV SSN Is Not Recognized)
Start Over
3) Account Verification Unsuccessful
Employee is prompted to contact HR who will
need to update NFC data
13
eAuthentication Employee Credentialing Process
(Scenario V SSN is already linked to an Account)
3) Account Verification Unsuccessful
Employee is notified that account already
exists. Instructed to inform Help Desk if they
did not create the account and how to
recover account information (password and User ID
if needed).
Start Over
14
eAuthentication Employee Credentialing Process
(Scenario VI Account linked to SSN is being
Processed)
3) Account Verification Unsuccessful
Employee will be prompted to wait due to
fact that the creation of a USDA employee account
with their information is already in
progress. They are instructed to inform
eAuthentication Help Desk if they did not
create an account.
15
eAuthentication Employee Credentialing Process
(Scenario VII Employee is Forest Service
Employee)
3) Account Verification Unsuccessful
Employee will be prompted to retry
registration once Forest Service
registration opens in August
16
eAuthentication Employee Credentialing Process
(Help File)
Complete Help is Available By Clicking Link
17
eAuthentication Employee Credentialing Process
(E-Mails)

• The USDA eAuthentication Service will
  automatically send an email to an employee at
  their official government work email address they
  provided in the registration process, with an
  email address from eAuthHelpDesk_at_usda.gov
• The auto-generated emails will be sent when
• The employee successfully registers for their
  USDA eAuthentication Employee Level 2 Account.
• (This confirmation e-mail will provide an
  activation link to verify the email address.
  If the employee does not receive the
  auto-generated confirmation email click on the
  activation link, the account will not be
  activated)
• The employee fails the registration process for
  their USDA eAuthentication Employee Level 2
  Account.

• SPAM filters can cause problems to this process.
  Agency Registration Leads should
• Know that employees are told to contact the help
  desk if they do not receive e-mail
• Work with Agency Network/E-Mail administrators to
  disable filtering of eAuth address

18
eAuthentication Employee Credentialing Process
(New Employee Registration)

• The USDA eAuthentication Employee Credentialing
  Process is for existing employees with existing
  records at NFC.
• A process for registering new employees hired
  after June 30th is being created.
• The long term solution will be created as part of
  the employee database.
• In the Short Term, each Agency must determine how
  to handle two (2) short term options

• Unless it is a critical need, creating accounts
  for new employees should be delayed until Aug
  1st.  If there is an immediate need to provide
  new employees with an account, additional
  information will be provided to the Agency
  Registration Lead as soon as possible

1. Employee can wait until first pay check
Instruct employee to use normalprocess
afterreceiving firstEarning Leave Stmt
More Information Coming!
2. Employee can not wait until first pay check
Agency Supervisor, HR or other authorized person
sends Agency Information Security System Program
Manager (ISSPM) request for eAuth account.
Include (for new employee)1. Agency2. SSN3.
Home City/State4. Date of Birth5. Authorized
Signature 6. E-MailNote - The
employee must have a valid and working email
address before requesting this process. Note -
The ISSPM is your agency specific security
officer.
Agency ISSPMsends eAuth Help Desk all
information ISSPM Signature
eAuth Help Deskconfirms source assists
employeew/ acct activation
19
Next Steps

• Complete Agency Rollout Plans if not done
• Prepare Rollout Materials (notice, job aid, etc)

• Agency Employee Registration Leads Meetings July
  14.

July 14 200 PM ETRm S-107 1-877-664-9764 269723

• Next Agency CIO Meetings July 7.

July 7 200 PM ETRm S-107 1-877-664-9764 269723