How safe is your application protected from cyber attacks ? Click Here

Need Help? Talk to an Expert +65 90851577 (WhatsApp)

Go through the guide to get knowledge about how to get the application works.

How to Guide

Getting Started: Guide to CyLock MFA

Introduction:

CyLock MFA is an advanced Out-of-Band Multi Factor Authentication (MFA) solution which provides strong authentication & authorization mechanism using end users mobile devices that defeats modern cyber threats like Man-in-the-Middle, Phishing & SIM swap fraud and provides real-time protection to user identity & data.

Organizations or individuals can protect their applications by using CyLock Multifactor Authentication (CyLock MFA). CyLock Portal provides administrators with the ability to manage their users, protect applications and configure various MFA parameters.

To use CyLock MFA, users have to subscribe for a plan and register their details to gain access to CyLock Portal. Read the documents carefully before using CyLock MFA effectively.

CyLock Portal will allow organization administrator or individuals to manage their user accounts, protect applications, manage devices etc. The brief description of the functionalities is given in subsequent sections.

CyLock MFA is available on . Download CyLock MFA mobile app to carry out authentication.

Registration:

Visit www.cybernexa.com to know more about MFA plans. Subscribe to a plan. For registration, do the following:

  1. Review the subscription plan based on your requirements
  2. Click the subscription plan you want to opt for
  3. This will open portal.cybernexa.com as shown below
  4. Click “Create your Account” to register with CyLock Portal
  5. Fill up the details as requested in the screen below
  6. Please provide a valid email id, as email validation token will be sent to this id
  7. Any Organization or Individual can sign-up for using CyLock MFA services. Select from the drop down if you are an Organization or Individual signing up for CyLock MFA services
    • For Organization trying to use CyLock MFA, registration can be done by the organization administrator who is going to manage the product inside the organization
    • For individuals, register with your personal email id
  8. If you are signing up on behalf of your organization, fill in your Organization Name and Number of Employees field as shown in the below screen
  9. Click “SIGN-UP” button
  10. Email validation page will be shown as below. Enter the token you received in the email id given in the registration page
  11. Click “Verify” button to validate the token. Once the validation is successful, user will be registered with CyLock Portal and thank you screen will be shown as below

USER MANAGEMENT

This section allows Organization administrator or Individuals to add users who will be required to login to CyLock portal to manage their identity.

User Management Screen provides the following options.

  1. Search Data
  2. Add User
  3. Delete User
  4. Change Status
  5. View or Update User
USER MANAGEMENT SCREEN

In portal, select the application to be protected. Except Web Applications, for all other applicationOne can manage portal users by clicking “User Management” menu available in the portal. On click of the menu user management dashboard will be shown as below:

Dashboard displays 3 metrics on the top like

  • Portal Users – Total Portal users in the Organization
  • Active Users – Total Active Users in the Organization
  • InActive Users – Total InActive Users in the Organization
SEARCH DATA

Search provides an option to search any data from the grid.

Adding Portal User

To add new portal users under your organization open the User Management page from the menu. While protecting an application this portal user name should be provided to link an application user to portal user. Only then end users can view their authentication details and configure various options provided for them.

  1. From the above screen, click “Add User” button to open the new User screen as shown below.
  2. Input First Name, Last Name
  3. Valid Email Address to be provided (User will receive all the Communication to this mail id)
  4. Valid Contact No to be entered (Mobile)
  5. Click “Save” button to add new User as highlighted above
  6. Click “Cancel” button, in case you don’t want to complete the process or to go back to the previous screen. Data entered will be discarded.
Deleting Portal User

Organization can delete the selected user if required by clicking the Delete Icon. Portal will prompt a confirmation dialog box to confirm for deletion. Based on confirmation, user will be deleted. In case “Cancel” button is clicked, no action will done.

Changing User Status

To change the statuses of the User from Active to Inactive or vice versa simply drag the icon to the other side.

View or Update User details

From the User management dashboard, click the link to modify the user’s First Name or Last Name or to simply view the User information.

CyLock Portal Login – For Organization Administrator

Organization administrators can login to CyLock Portal to manage their user accounts, protect applications, manage devices etc.

1. Login Screen Image

STEPS TO LOGIN TO PORTAL.CYBERNEXA.COM
  1. Browse to portal.cybernexa.com
  2. Login Screen will be shown as given above
  3. Enter Your Registered Login ID in Email Field and Corresponding Password in Password Field
  4. Clock “Login” button, to login into the Application
  5. If successful, screen will be redirected to Dashboard page as shown in the below image

Forget Password

In case you forget CyLock portal password visit portal.cybernexa.com to reset it.

  1. Browse to portal.cybernexa.com
  2. Click “Forgot Password” link in the Login Page as shown above
  3. Forgot Password Screen will open as shown in the below screen
  4. Enter registered email id
  5. Click “Send Email” button to receive a token Code in your Email Address
  6. Enter token received in the Token verification Screen as shown below
  7. Once the token value matches the Database, it opens the Change Password Screen as given below to enter your New Password for your Login ID.

Securing an Application:

Using CyLock, organizations / Individuals can enable MFA for the below applications:

  1. Desktop Login
  2. Remote Login
  3. SSH login
  4. Web Applications
  5. Active Directory Login
  6. Microsoft AD FS (for SSO)

In portal, select the application to be protected. Except Web Applications, for all other application protection download corresponding agents/components to integrate with CyLock platform for MFA. Use the details displayed during application protection.

Pre-requisites:

Securing an application requires an active CyLock account. Refer “Getting Started: Guide to CyLock MFA” to start using CyLock MFA to protect your applications.

Follow the below steps to secure an application with CyLock MFA::

  1. Login to portal.cylock.com
  2. Click "Application" menu. List of application secured will be displayed as shown
  3. Click "Add Application" button as shown in the below
  4. Secure Application screen with the list of applications that can be enabled with MFA will be show as below. Select the application to be secured and click "+Secure" button.
  5. Application information screen will be displayed. Depending on the application being secured, details will be shown.
  6. For Web Application, input Server IP address, Application URL and application alias fields in the below screen.
  7. Note:
    • API Key and Customer ID. These details have to be used while integrating CyLock RESTful APIs from a web application. Refer CyLock Web Application Integration manual for more details.
    • Do not share the API Key and Customer ID with any one.
  8. On click of "Save" button, application will be secured and below screen will show the recently secured application.

Adding Application Users

Application Users: Refers to user names which will be used to login to the particular application for which MFA has to be enabled.

Pre-requisites:

Before adding an application user, complete the following activities:

  1. Registration with CyLock Portal
  2. Add a portal user
  3. Secure an application (Refer “Securing an Application” section)

To add application users follow the below steps

  1. Log on to portal.cybernexa.com
  2. Click “Application” menu. This will open Application Dashboard screen as shown below
  3. Click add user icon to add a new application user using the below screen
  4. Select Portal user name, you want to associate the application user with. One portal user can have multiple application user names associated. It will provide a single login for the end user to view and configure their devices for multiple applications
  5. Input other details like application user name, user’s email id, expiry date. If expiry date is set, CyLock will not authenticate that user after the expiry date. Email ID is mandatory, as the end user will receive all communications related to CyLock to this id
  6. Organization administrator can also set what MFA configurations are allowed for each user. Options for MFA like, Push or PIN or Biometric, offline authentication and geo location (geo-fencing) can be enabled as shown in the below screen.
  7. Click “Save” button to add a new application user. A success message will popup if new is added

Device Management – End User

Devices menu provides the information about the number of devices registered by an end User. Device Screen lists all the registered devices and the options enabled for that device and application. This screen has the option to View / Update and Delete a device that has been registered. Default Device can be set if a user has multiple devices registered for same account. Device screen has two metrics which are shown in the top of the screen

  • Android - Total Android Devices Registered by the Organization
  • IOS - Total IOS Devices Registered by the Organization
Set a Device as Default

To set a device as default click option against the device in the list shown (refer above image). This will set the device in the selected row to default and make the other devices non-default

Device – View / Update

  1. Click the Link View / Update ( ) to view device details.

Geofencing Authentications

CyLock provides options to end user to geo-fence authentication responses. For each device users can have multiple geo-fences set. After a geo-fence is set, any authentication response from the mobile device will accepted only the user’s device is within the geo-fence. If the user device is outside the geo-fence authentication will be rejected, even if the user accepts the request.

  1. To add a geo-fence for a device, click ( ) to add Geo fencing. Following screen will be opened to enter the fence details.
  2. Enter the address from which the geo-fence has to be enabled
  3. Enter radius (Km) for the geo fencing perimeter
  4. Click “Search” button to display all the relevant location as shown in the below screen
  5. From the list of a geo-locations, select the required location by clicking Select check box and click “Add” button as shown
  6. After successfully updating the geo-fence details along with the latitude / longitude will be shown as below

Deleting a Device

In case user loses a device, the same can be deleted from the portal. This will render the CyLock app in capable of completing authentications. Any further request for authentication will be blocked.

  1. Click “Devices” menu
  2. From the list of devices shown, select the device to be deleted
  3. Click “Delete” button
  4. Upon confirmation, device will be deleted and no more authentication request will be sent to that device
Shape Shape

Use The Best Product to Protect your Application


Start Free Trial House Image