User Management and Security

This page will cover the various user management options and the authentication and security methods available for accessing ConnectSecure.

Please Note: SMS Gateway is not available.

All data is stored in Postgres with row-level security, and the managed database is encrypted at rest. Sensitive information is encrypted at the application level using AES 256 Ferner encryption.

Once a password is entered and saved, the next time you view/edit that option, the password will display blank by design.

1 Add New User
- 1.1 Configure Company Level Access
- 1.2 New User 2-Factor Setup
  - 1.2.1 Authenticator App Method
  - 1.2.2 Device Dependent Method
2 Reset Password / MFA
- 2.1 Ask Your Admin
- 2.2 Self-Service Using Reset Password Link
3 Supported Password and Security
- 3.1 Passwordless Authentication
- 3.2 Multifactor Authentication
4 Assigning Security Roles to Users
5 Default Roles and Security Matrix
6 Company Level Allow/Deny Access Options
- 6.1 Allowed Companies
- 6.2 Denied Companies
7 API Key
8 Need Support?

Add New User

Navigate to Global > Settings > Users and tap the Add button.

Complete the required fields, which include the First Name, Last Name, Email, Phone Number, and Role.

Configure Company Level Access

When selecting a ROLE, you can configure the Company Level Access for that Role.

You can use the three-dot action menu on the far right to Edit a User, Reset MFA, Delete a user, or access an API Key.

The new user will receive an email where they must finish the initialization process by clicking through the email and completing their setup; the actual email example is below.

After clicking the 'Finish initialization' button link in the email, the new user will be asked to verify their email, enter the Code from the email (which is pre-filled), and create a new password.

Once the password requirements are met, the green checkmarks and the Next button will be illuminated.

The User-activated confirmation page will appear, and the user can click the Next button.

Enter your Login Name (the email address used for signup) and password.

New User 2-Factor Setup

Tap your choice and then the Next button for setup. Below are instructions for the two options.

Authenticator App Method

Select the Authenticator App option, then tap next.

Use your smartphone with your authenticator app (Google Auth, Microsoft Auth, Authy, Duo, etc...…), scan the QR code, or copy the Secret and enter it manually into your app to get your Code to join.

Upon entering the Code and tapping next, you should see the 2-factor verified screen to confirm your setup. Tap the Next button to proceed.

You’s name based on your company.

Device Dependent Method

Select the Device dependent option, then tap Next.

Enter the name of the security key or device that will be used. In this example, I am using my Windows-based desktop computer, so I am just using the local name of my PC, RS-Steel-Legend; you can use any name you choose.

You will be prompted to enter your Windows Security password option configured; in this case, I am using the Windows Hello pin.

Once you enter your PIN or alternative password, you will be prompted that the passkey is saved.

2-factor verified confirmation appears; tap the Next button to complete.

You will be redirected to the authentication front-end Zitadel (http://authprod.myconnectsecure.com), where you will see your newly created user account details and options for password and Security, Identity Providers, Authorizations, Memberships, and Metadata.

Tap on the Password and Security section on the left panel to view your 2-factor setup and options to configure additional authentication.

This completes your setup. You can now visit the ConnectSecure portal and log in at https://portal.myconnectsecure.com. You must provide the tenant name based on your company.

Reset Password / MFA

This section will review how to use the password and MFA reset options and methods.

Ask Your Admin

If you have another user at your company with Admin permissions, you can ask them for assistance if you need to use the RESET MFA option.

Navigate to Global > User Management and use the three-dot action menu next to the user's name.

Once Reset MFA is initiated, The user can navigate to the login screen, enter their password, and they will then be prompted to set up their MFA

Self-Service Using Reset Password Link

From the login link (https://authprod.myconnectsecure.com/ui/login/loginname ), tap the Reset Password link.

Confirm your email address is correct, then tap the next button.

You will receive an email with a link to 'Reset password' as shown below. Tap on the Reset password button.

The Code from the email should be automatically inserted into the Set Password screen. If it isn't, please copy and paste it, then set your new password and tap Next.

You will see the Password Set confirmation screen; tap the Next button to complete.

Upon successful login, you will be prompted to Verify 2-Factor before logging in.

You will be prompted to enter your Windows Security, Auth App, or whichever https://cybercns.atlassian.net/wiki/spaces/CVB/pages/2085060888you have configured in your tenant.

Upon successful login, you will land on the Zitadel authentication front end; navigate to your portal login screen here: https://portal.myconnectsecure.com to access the application.

Supported Password and Security

ConnectSecure has several methods available for authentication, which are found in the Zitadel portal; log in by visiting https://authprod.myconnectsecure.com, tap the Profile icon under the User icon, or from the sidebar using the Profile icon (must be at Global > Overview to access)

Tap to the Password and Security section. You will see your three main options.

Local password
Passwordless Authentication
Multifactor Authentication

Passwordless Authentication

Tap the Add method option to add a new Passwordless method.

Give the authenticator a name and tap Send Registration Link (1) or Generate QR Code (2).

Multifactor Authentication

Tap the Add Factor option to add a new multifactor method.

Tap on the desired option, which includes Auth App (TOTP), Fingerprint, Security Keys, Face ID, Windows Hello, or the One Time Password (OTP) email option.

Assigning Security Roles to Users

Navigate to Global > Settings > Users menu.

From the User Management screen, you will see the list of users with details that include First Name, Last Name, Email, Status, Company Access, and Role information.

You can use the three-dot action menu to Edit a user and assign a Role.

Select a Role and tap Update to save any changes.

Default Roles and Security Matrix

ConnectSecure offers the following predefined roles with access to the data listed in the table below:

Role	Overview	Assets	Vulnerabilities	Compliance	Active Directory	PII	Read	Write

Role	Overview	Assets	Vulnerabilities	Compliance	Active Directory	PII	Read	Write
ADMIN	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
ACTIVEDIRECTORYVIEWER	Yes	No	No	No	Yes	No	Yes	No
ACTIVEDIRECTORYWRITER	Yes	No	No	No	Yes	No	Yes	Yes
APPROVER	No	No	No	No	No	No	Yes	No
ASSETVIEWER	Yes	Yes	No	No	No	No	Yes	No
ASSETWRITER	Yes	Yes	No	No	No	No	Yes	Yes
COMPLIANCEVIEWER	Yes	No	No	Yes	No	No	Yes	No
COMPLIANCEWRITER	Yes	No	No	Yes	No	No	Yes	Yes
PIIVIEWER	Yes	No	No	No	No	Yes	Yes	No
PIIWRITER	Yes	No	No	No	No	Yes	Yes	Yes
VULNERABILITYVIEWER	Yes	No	Yes	No	No	No	Yes	No
VULNERABILITYWRITER	Yes	No	Yes	No	No	No	Yes	Yes

Company Level Allow/Deny Access Options

You can restrict a user to a specific company or set of companies based on the Security Role assigned.

Allowed Companies

Denied Companies

Choose the Denied Companies radio option, then select from the Choose Company drop-down.

API Key

You can obtain an API Key from the Member by navigating to Global > Overview/Dashboard > Users >User Management > tap the three-dot Action menu > API Key.

This will display your Client ID and Client Secret values.

Need Support?

Contact our support team by sending an email to support@connectsecure.com or by visiting our Partner Portal, where you can create, view, and manage your tickets.

https://cybercns.freshdesk.com/en/support/login