Login and Personal Profile

Login

Access KerusCloud by navigating to https://keruscloud.com directly from the browser. User can be authenticated to KerusCloud by one of two methods:

• User Credentials

• Single Sign-On (SSO)

On successful login, by whichever method your organisation has enabled, the user will be initially presented with their personalised KerusCloud Dashboard, described in detail in the Dashboard section.

User Credentials

Username: Email address supplied on registration.

Password: Current password. For first time login, refer to First Time Login below.

First Time Login

On registration to KerusCloud a user will receive an email to the account supplied, this will contain a temporary password, which will be used only for the first login.

Enter the username (the email address supplied) and the temporary password, into the initial Login screen and press Login. This will launch a new screen to guide through creation of a new password, adding a Display Name; the new password must meet the password policy described below.

Password Policy

KerusCloud requires strong passwords. To achieve this, all passwords must be a minimum of 10 characters, and must contain at least one of each of the following:

• Uppercase character

• Lowercase character

• Number

• Special character ( [ = + - ^ $ * . ( ) ? ” ! @ # % & / \ , > < ’ : ; | _ ~ ` ] )

Forgotten Password

If the user has forgotten their password, they can click the Reset password link on the KerusCloud Login screen to create a new one. This will take the user to a new screen where they will be required to enter their registered email address to request a password reset code, via the Submit button. The user should receive an email containing a 6-digit password reset code, this code should be entered into the Verification Code field on the screen, along with a new password, and confirmation of the new password. The new password must meet the password policy. Press the Submit button to commit the change, the user is then logged into KerusCloud with the new password. Password reset codes are valid for one hour.

Single Sign-On (SSO)

For users belonging to SSO-enabled organisations, on the KerusCloud Login screen, press Login with SSO. User is then able to enter their federated identity email address, click Login and be authenticated to KerusCloud. Single Sign-On may also be setup in such a way that users can launch KerusCloud directly from their own federated identity management application and be authenticated through to KerusCloud without providing their federated identity email address.

Setting up Single Sign-On

Your organisation will have already decided which method to use for logging in and authenticating to KerusCloud.

For more information on setting up Single Sign-On, refer to releventant section on the Appendix.

Profile

At the top right corner there are three clickable icons:

1. Link to access user’s Profile
2. Link to KerusCloud Support where requests can be submitted
3. Sign Out

To access user profile click on the first of the icons and select Profile.

Profile Details

Users can view existing details within the Profile Details section. For non-SSO enabled users, passwords can be changed by clicking the Edit button and entering to the Edit Profile Details screen. The current password is required to affect a password change.

Password management for SSO enabled users is handled in the users own federated identity management application.

Enabling Multi-Factor Authentication

Under Authentication Preferences within the user’s Profile, Multi-Factor Authentication can be enabled and configured. After enabling, the user can scan the displayed QR code using a multi- factor authentication app to generate an authentication code, enter the code and confirm configuration. While Multi-Factor Authentication is enabled, the user is prompted to enter an additional authentication code as part of the Login process. Multi-Factor Authentication can be disabled per user at any time, upon confirming the user’s current password.