keystone login migration guide draft login user guide v… · 2 introduction keystone login is an...

Keystone Login User Guide Version 1.0

Revision History

Date Version Description Author

1/3/2020 1.0 Original document Matthew Pogacnik

1

TABLE OF CONTENTS

Introduction................................................................................................................. 2

Registration................................................................................................................. 3

Log In ........................................................................................................................... 8

Forgot Username ...................................................................................... 9

Forgot Password ..................................................................................... 10

PA Login Migration .................................................................................. 14

Social Account ....................................................................................... 18

Account Self-Management....................................................................................... 24

Change Password ................................................................................... 24

Edit Account .......................................................................................... 26

Social Account ....................................................................................... 28

Multi-Factor Authentication (MFA) ............................................................. 30

Verification ............................................................................................ 33

Log out ................................................................................................. 35

2

INTRODUCTION

Keystone Login is an account management system for Commonwealth of Pennsylvania online services. The Keystone Login portal provides the following

capabilities: account creation and management, identity verification, authentication

services and single sign-on (sign on once to access multiple applications), social

media login (e.g., Google), and risk-based multi-factor authentication.

The images included in this document derive from a desktop session. Keystone Login

can also be accessed via laptops, tablets, and mobile devices. While the instructions included in this document remain the same regardless of the device used to access

Keystone Login, images may appear different on different devices.

3

REGISTRATION

You may register as a user through the Keystone Login portal at https://keystonelogin.pa.gov/. You can also link a social account (e.g., Google) to

Keystone Login. The registration steps for each process are as follows:

To register as a Keystone Login user through the portal, follow these steps:

1. From the Welcome page at https://keystonelogin.pa.gov/, click “Register.”

2. Enter your personal information (i.e., first name, last name, date of birth).

3. You may optionally enter your contact information (i.e., email and mobile

phone number). a. A valid email address is necessary for account information retrieval.

4

4. Enter a username for your Keystone Login account.

a. You will be unable to edit the username once it is registered.

b. Usernames must be between 6 and 20 characters and should not contain

spaces or special characters (e.g., /, ?, @, etc.). 5. Enter a password for your Keystone Login account.

a. Passwords must be between 12 and 128 characters.

b. Do not include your username, first name, or last name in the password. i. The password must include any three of the following four

criteria:

1. One uppercase letter (e.g., A, B, C, etc.) 2. One lowercase letter (e.g., a, b, c, etc.)

3. One number (e.g., 1, 2, 3, etc.)

4. One special character (e.g., /, ?, @, etc.)

6. Confirm your password. 7. Choose three security questions from the drop-down menus.

a. Answer each question in the spaces provided.

b. Answers should be unique. Do not use the same answer for multiple questions.

8. Once the required information has been entered, click “Register.”

5

A message will be displayed to notify of a successful account creation.

As an alternative, to register as a social user with Keystone Login, follow these steps:

1. From the Welcome page at https://keystonelogin.pa.gov/, click “Log In.”

6

2. Click “Sign in with Google.”

3. You will either be redirected to a Google sign in page or automatically signed in if you previously entered the login credentials.

4. Click “Register.”

7

A message will be displayed to notify of a successful account creation.

8

LOG IN

To log in to Keystone Login, follow these steps:

1. From the Welcome page at https://keystonelogin.pa.gov/, click “Log In.”

a. If you are continuing from Registration, you have already been directed

to this page by clicking “Login.”

2. Enter your Keystone Login username and password. 3. Click “Log In.”

9

Forgot Username If you forget your username, follow these steps:

1. From the Welcome page at https://keystonelogin.pa.gov/, click “Log In.” 2. Click “Forgot Username?”

3. Enter the email address associated with the Keystone Login account.

4. Click “Submit.” a. An email will be sent to the address on file to provide the registered

username.

10

Forgot Password If you forget your password, follow these steps:

1. From the Welcome page at https://keystonelogin.pa.gov/, click “Log In.” 2. Click “Forgot Password?”

3. Enter your Keystone Login username.

4. Click “Submit.”

5. Select one of the methods displayed to reset your password: “Reset by

Security Questions” or “Reset by Email”

6. If you choose to “Reset by Security Questions”:

11

a. Answer each security question. b. Click “Submit.”

c. Enter a new password.

i. Passwords must be between 12 and 128 characters. ii. Do not include your username, first name, or last name in the

password.

1. The password must include any three of the following four criteria:

a. One uppercase letter (e.g., A, B, C, etc.)

b. One lowercase letter (e.g., a, b, c, etc.) c. One number (e.g., 1, 2, 3, etc.)

d. One special character (e.g., /, ?, @, etc.)

d. Confirm your new password.

e. Click “Submit.”

12

A message will be displayed to notify of a successful change to your password.

7. If you choose to “Reset by Email”:

a. An email will be sent to the address on file to provide the registered

username.

A message will be displayed to notify that a password reset email has been sent.

13

14

PA Login Migration PA Login users will have to migrate their accounts to Keystone Login to maintain

account activity history within the applications. The ability to create a new PA Login

account ended effective December 21, 2019.

If you are a new Keystone Login user, follow these steps to migrate your PA Login

account:

1. From the Welcome page at https://keystonelogin.pa.gov/, click “Log In.”

2. Click “Migrate an existing PALogin account?”

3. Click “I have not logged into Keystone Login before.”

a. Enter your PA Login credentials (i.e., PA Login Username, PA Login

Password).

b. Enter your new Keystone Login account details (i.e., Keystone Login

username, email address, date of birth, password). i. Passwords must be between 12 and 128 characters.

ii. Do not include your username, first name, or last name in the

password.

1. The password must include any three of the following four criteria:

a. One uppercase letter (e.g., A, B, C, etc.)

b. One lowercase letter (e.g., a, b, c, etc.)

15

c. One number (e.g., 1, 2, 3, etc.) d. One special character (e.g., /, ?, @, etc.)

c. Choose three security questions from the drop-down menus.

i. Answer each question in the spaces provided.

ii. Answers should be unique. Do not use the same answer for multiple questions.

d. Click “Submit.”

A message will be displayed to notify of a successful account migration.

If you have an existing Keystone Login account, follow these steps to migrate your

PA Login account:

1. From the Welcome page at https://keystonelogin.pa.gov/, click “Log In.” 2. Click “Migrate an existing PALogin account?”

16

3. Click “I have an existing Keystone Login account.”

4. Enter your PA Login credentials (i.e., PA Login username, PA Login password).

5. Enter your Keystone Login credentials (i.e., Keystone Login username, Keystone Login password).

6. Click “Submit.”

17

A message will be displayed to notify of a successful account migration.

18

Social Account Social accounts provide easier access for some users. Rather than create an account

with a new username and password, users may link an existing Google account to

Keystone Login.

To link a Google account with Keystone Login, follow these steps:

1. From the Welcome page at https://keystonelogin.pa.gov/, click “Log In.” 2. Click “Sign in with Google.”

On the home page, you are provided two options: “Convert my Account to a Keystone Account” or “Add my social account to a Keystone Account.”

If you want to convert your social account to Keystone Login, follow these steps:

1. From the home page of Keystone Login, click “Convert my Account to a

Keystone Account.”

19

2. Enter your personal information (i.e., first name, last name, date of birth).

3. You may optionally enter your contact information (i.e., email and mobile

phone number). a. A valid email address is necessary for account information retrieval.

20

4. Enter a username for your Keystone Login account.

a. You will be unable to edit the username once it is registered.

b. Usernames must be between 6 and 20 characters and should not contain spaces or special characters (e.g., /, ?, @, etc.).

5. Enter a password for your Keystone Login account.

a. Passwords must be between 12 and 128 characters. b. Do not include your username, first name, or last name in the password.

i. The password must include any three of the following four

criteria: 1. One uppercase letter (e.g., A, B, C, etc.)

2. One lowercase letter (e.g., a, b, c, etc.)

3. One number (e.g., 1, 2, 3, etc.)

4. One special character (e.g., /, ?, @, etc.) 6. Confirm your password.

7. Choose three security questions from the drop-down menus.

a. Answer each question in the spaces provided. b. Answers should be unique. Do not use the same answer for multiple

questions.

21

8. Once the required information has been entered, click “Register.”

If you want to add a social user to your existing Keystone Login account, follow these steps:

1. From the home page of Keystone Login, click “Add my Social Account to a Keystone Account.”

22

2. Enter your Keystone Login username and password.

3. Click “Log In.”

A message will be displayed to notify of a successful account creation.

23

24

ACCOUNT SELF-MANAGEMENT

After logging in to your Keystone Login account, you may choose from the following options:

Change Password To change your password for Keystone Login, follow these steps:

1. From the home page of Keystone Login, click “Change Password.”

2. Enter your current password.

3. Enter a new password.

a. Passwords must be between 12 and 128 characters.

b. Do not include your username, first name, or last name in the password. i. The password must include any three of the following four

criteria:

1. One uppercase letter (e.g., A, B, C, etc.) 2. One lowercase letter (e.g., a, b, c, etc.)

3. One number (e.g., 1, 2, 3, etc.)

4. One special character (e.g., /, ?, @, etc.) 4. Confirm your new password.

5. Click “Update.”

25

A message will be displayed to notify of a successful change to your password.

26

Edit Account If you need to change any personal information for your Keystone Login account,

follow these steps:

1. From the home page of Keystone Login, click “Edit Account.”

2. Answer each security question.

3. Click “Submit.”

27

4. Adjust your personal information (i.e., first name, last name, date of birth). 5. You may optionally enter your contact information (i.e., email and mobile

phone number).

a. A valid email address is necessary for account information retrieval but

is not required. 6. Adjust your security questions and answers.

a. Answers should be unique. Do not use the same answer for multiple

questions. 7. Once you have made the desired changes, click “Update.”

A message will be displayed to notify of successful updates to your profile.

28

Social Account If you need to change your Google account information, follow these steps:

1. From the home page of Keystone Login, click “Manage Social Logins.”

2. Answer each security question in the spaces provided.

3. Click “Next.”

a. Open a separate tab in your browser and log out of your Google account. 4. Once you have logged out of your Google account, click “Change my Google

Login.”

a. You will be redirected to Google. Enter the Google account credentials.

b. After entering the account credentials, you will be redirected back to Keystone Login.

5. Verify the email address.

6. Click “Register.”

A message will be displayed to notify of a successful update to your account.

29

To delete a social user, follow these steps:

1. From the home page of Keystone Login, click “Manage Social Logins.”

2. Answer each security question in the spaces provided.

3. Click “Next.” 4. Click “Delete.”

30

Multi-Factor Authentication (MFA) To enable multi-factor authentication for additional security, follow these steps:

1. From the home page of Keystone Login, click “Manage Multi-Factor Authentication.”

2. Click “Verify Account.”

a. Choose a verification provider from the following options: Pennsylvania

Department of Transportation (PennDOT) or Experian b. Click “Next.”

31

3. If you select PennDOT:

a. Your first name, last name, and date of birth should automatically

populate.

b. Enter your Driver’s License Number. c. Click “Validate.”

4. If you select Experian:

a. Your first name and last name should automatically populate. b. Enter your address, city, state, and zip code.

c. Click “Next.”

d. Answer each of the five verification questions. e. Click “Validate.”

5. Check the box next to “Enable Multi-Factor Authentication.”

6. Click “Update.”

7. Answer each security question in the spaces provided or enter the one-time

passcode sent to the associated email address. 8. Click “Next.”

A message will be displayed to notify that Multi-Factor Authentication was enabled.

32

33

Verification To verify your Keystone Login account, follow these steps:

1. From the home page of Keystone Login, click “Verify Account.”

2. Choose a verification provider from the following options:

a. Pennsylvania Department of Transportation (PennDOT)

b. Experian c. Click “Next.”

34

3. If you select PennDOT:

a. Your first name, last name, and date of birth should automatically

populate.

b. Enter your Driver’s License Number. c. Click “Validate.”

4. If you select Experian:

a. Your first name and last name should automatically populate. b. Enter your address, city, state, and zip code.

c. Click “Next.”

d. Answer each of the five verification questions. e. Click “Validate.”

A message will be displayed to notify of successful identity verification.

35

Log out To log out of Keystone Login, click “Log out.”