From the User Management menu you can manage your system’s user accounts. You will have the ability to add new users to your company, edit user information and delete user accounts.

To access the User Management menu you must be a user that has the Manage users privilege.

Add a new user

Log into the system as an administrator.
From the settings menu ('cog' icon), select Users.
Click New user.
You must enter as a minimum a First Name, Last Name and Email Address.
Optionally you can enter Job Title, Office Phone and Mobile Phone.
You can select the role from the drop down menu.
For MFA, select the method of token generation from the Two-Step Verification Token option.
You can tick the administrator option if you wish this user to have access to the Settings menu.
Click Save user.
This will email a link to the user to activate their account by setting their own password and password recovery security questions.

Delete a user

Log into the system as an administrator.
From the settings menu ('cog' icon), select Users.
Click the action button (...) next to the user you wish to delete.
Click Delete.
The user will still appear in the Users screen, but the status of the user will have changed to deleted.

Edit a user

Log into the system as an administrator.
From the settings menu ('cog' icon), select Users.
Click the action button (...) next to the user you wish to edit, and then View.
You are then able to change any of the fields present.
You are also able to click on the Notifications tab.
You may then tick and untick the notifications you wish this user to receive from RBS Autopay Online Plus.
If you make any changes click Save changes.

Reset a user's password

This page describes how an administrator can reset a user’s password.

Roles

For instructions on a user can reset their own password, see Passwords.

Log in as an administrator.
From the settings menu ('cog' icon) select Users.
Click on the drop-down arrow for the user.
Click Reset password.

An email will be generated for the user to action by entering their email address. The link in the email will expire after 10 minutes.

Once an administrator has reset a user's password the user should click the link on the email, and then follow the steps on screen to set up a password and choose security questions.

The next step is determined by a user's two-step verification token (MFA) setting, see Mobile app or Hardware key fob.

MFA

Multi-Factor Authentication (MFA) is a security system that requires more than one piece of evidence (known as a ‘factor’) to authenticate the user for login or other transaction.

Entering your username and one password alone is considered a single-factor authentication. MFA adds a second level of authentication to an account login, decreasing the likelihood that others can compromise your account.

With Autopay Online Plus MFA the factors (evidence of identity) are:

Something you know, your user name and password.
Something you have, a one-time passcode (OTP) from the hardware key fob or mobile app.

How it works

When you log in to Autopay Online Plus, as well as your user name and password you must additionally enter the one-time passcode generated by the key fob or mobile app.

The key fobs are ideal for authentication applications where portability and ease of use are paramount. These small devices fit comfortably on a key ring in any pocket or purse. A simple push of a button generates a one-time passcode. These tamper-resistant devices can be used wherever strong authentication is required.

If using the mobile app, download once registered with the RBS Autopay Online Plus by scanning an on-screen QR code, each time you go into the app or refresh a one-time passcode is generated. The app can be downloaded from the Apple app store, or Google Play store for Android devices without charge.

MFA options

A user can be configured to use either mobile app or key fob MFA when accessing RBS Autopay Online Plus.

Mobile app - A user needs user name, password and codes generated by the mobile app.
Hardware - A user needs user name, password and codes generated by a key fob.
Note: Hardware MFA will only be available if it has been enabled for your tenant and you have purchased key fobs.

The selected MFA option for a user is available on the Users screen. The serial number will also be available once a key fob user has registered their serial number during the MFA setup process.

Setting a user to have MFA

Log into the system as an administrator.
From the settings menu ('cog' icon) select Users.

On the Users screen select the user's email address in the Email column.
From the drop down for Two-step verification token select Mobile app or Hardware.
Click Save changes.

The next time the user logs in to the solution they will be prompted to enter the necessary details depending on the MFA setting.