A User must have a valid InfraLink account and must authenticate with the system to access InfraLink functionality tools and the data maintained in the system.

Depending on the operational requirements and security policy for the particular Instance, one or multiple authentication modes may be available to Users.   InfraLink supports multiple methods for authenticating its Users:

• Username and password password
• Username and password with enterprise integration
• OpenID Connect
• PKI certificate-based

Based on the security policy established by the Instance owner, the administrator configures one or multiple authentication multiple authentication providers/domains.Each authentication provider/domain definition contains a descriptive has a user-friendly name , a specific supported that identifies the authentication mode , and additional mode-specific parameters. By selecting the authentication provider/domain when requesting a new account or attempting to access the application you will be selecting the authentication mode defined for that provider. For instance, if you select an authentication provider configured for username/password authentication against the enterprise Active Directory / LDAP, InfraLink will require you to use the corresponding Active Directory credentials and will validate them against the enterprise directory. 

This article will cover the following topics and features related to accessing InfraLink.

...

To access an InfraLink Instance, you must have a User Account specific to that instance. If you do not have a User Account, you can request one from the Instance Sign In page. 

...

follow the guidance below to request one.

1. Open a web browser and navigate to the InfraLink instance (i.e., URL) supporting your project, business unit or company.
   1. Note: If

...

1. 1. you are unsure of the

...

1. 1. instance URL,

...

1. 1. request guidance from your supervisor

...

1. 1. or Instance Administrator.

1. The instance sign-in page displays an option for each authentication method supported by that instance.
2. Select the authentication method that will apply to your new InfraLink user account.
   1. The appropriate option often specifies your company/agency name and the identity verification method.
   2. See the guidance that corresponds with your selection below.

   3. Gliffy Diagram
      name Sample Sign-In Options (Oct 2022) pagePin 1

Selecting an Enterprise Account Option

1. Upon making your selection, you will be directed to the corresponding Identity Provider (IDP) and prompted to enter credentials.
   1. Note: If you currently have an active IDP session, your identity will be verified without entering credentials.
2. Once your identity is verified, you will be directed back to InfraLink for authentication.
3. If you do not have a User Account for the InfraLink instance, you will be prompted with the question, "Would you like to request a user account?"
4. Click Yes. 

   1. Gliffy Diagram
      name Request User Account Prompt pagePin 1

5. From any web browser, enter and go to the URL associated with the desired Instance. 
6. Click the Request Account link in bottom left corner of the sign-in window.
7. You will be presented with the New User Account Request form. You must complete all required fields, which are marked form.
   1. Some form fields will be pre-populated with data from the enterprise IDP. Leave each prepopulated entry as is.
   2. Any fields with an asterisk
   (
   1. *
   )
   1. are required.
    
   1. 
      
      1. Notes: Specify your project and responsibilities for correct account configuration. A brief description will suffice.
         

         Gliffy Diagram
         name New User Account Request Prepopulated pagePin 1

8. Click on Request at the bottom right corner of the window.
9. A message will confirm that your request was successfully submitted.

Selecting an Internal Account Option

1. Upon making your selection, you will be directed to the 
2. Click the Request Account link.

   1. Gliffy Diagram
      name New Internal User Account Request pagePin 1

3. The New User Account Request form will appear.
4. Populate all required fields, which are marked with an asterisk (*) and any optional fields that apply.
   1. Authentication/Provider Domain: Select the correct provider dependent on your company.
      1. Following this selection provide
   2. Authentication Provider/Domain: Select the correct Authentication Provider/Domain for your User Account. Your Instance Administrator will configure the Authentication Provider/Domain options to be intuitive. Please select the one appropriate for your account. If uncertain, contact your Instance Administrator for assistance. 
      1. A given InfraLink instance may support multiple categories of Users, and the Users may rely on different Authentication Providers/Domains to authenticate with the system. For example, some Users may use their corporate Active Directory/Domain accounts, while the other group of Users may rely on usernames/passwords managed directly in InfraLink. Similarly, an InfraLink Instance may be configured to authenticate Users via PKI certificates, such as DOD Common Access Cards (CAC). 
      2. Your InfraLink Instance may be configured to use PKI certificates for secure access. In such case, you may be prompted to supply your certificate by inserting the smart card (e.g., DOD CAC). Follow the instructions as they are presented.
   3. Enter
      1. a Login Name for your account.
      If prompted, enter
      1. Enter a Password for your
      User Account. Note: Password requirements may vary based on the Authentication Provider/Domain selected.
      1. account. The Password must meet complexity requirements:
         1. 8 to 50 characters;
         2. one (1) lower case character;
         3. one (1) upper case character;
         4. one (1) digits; and
         5. one (1) special character. 
      2. Re-enter that same Password.
   4. Notes: Specify your project and responsibilities for correct account configuration. A brief description will sufficeNotes: Enter a brief description of your project(s) role and responsibilities. This information informs account configuration.
   5. Email: Enter your company email address.
   6. First Name: Enter your first name.
   7. Last Name: Enter your last name.
5. Once all required fields are populated, click the Request button Click on Request at the bottom right corner of the formwindow.  If all required information was provided, you will receive a request confirmation message
6. The application will provide a confirmation that your request was successfully submitted.

   1. Gliffy Diagram
      macroId f68fa46b-f8b1-4855-85f2-a9a51b28e6b7 displayName

...

1. 1. Request

...

1. 1. Submission Confirmation name New User Account Request Form pagePin

...

1. 1. 5

User Account Approval and Activation

All New User Account Requests must be reviewed by an Instance Administrator. Upon the approval of your New User Account Request, you will receive an email notification. This notice will be sent to the email address specified within the New User Account Request form.

...

InfraLink Sign In with a User Account

If you already have an existing User Account, access InfraLink from the Sign In page for the Instance.

The Sign In page consists of the following controls:

• Authentication Provider / Domain: A given InfraLink instance may support multiple categories of Users, and the Users may rely on different means to authenticate with the system. For example, some Users may use their corporate Active Directory/Domain accounts, while the other group of Users may rely on usernames/passwords managed directly in InfraLink. Similarly, an InfraLink Instance may be configured to authenticate Users via PKI certificates, such as DOD Common Access Cards (CAC).
  Your InfraLink Instance Administrator will configure the Authentication Provider/Domain options to be intuitive. Please select the one, which matches the way your User Account is configured. If uncertain, you can try different options or contact your Instance Administrator for assistance.
  
• Login Name and Password: Use these fields to enter the login name and password created when registering your InfraLink account. Please note:
  • If you are using a PKI certificate (e.g., CAC) to authenticate, you will not need to enter the login name and password. The fields will be disabled when you select the Authentication Provider/Domain corresponding to your access method;
  • If you are using a domain (Active Directory) account, you will need to enter the login name and password maintained in Active Directory.

...

Once your InfraLink User Account has been approved and activated by an Instance Administrator, you will receive email notification. You can then sign in to InfraLink.

1. Using any browser, navigate to the URL for the desired InfraLink instance.

2. From the sign-in page, select the correct authentication method for your User Account.

   1. This will be the same selection made when you requested your User Account.

3. Based on your selection you will be redirected for identity verification:

   1. Enterprise account users will be redirected to the enterprise Identity Provider (IDP).
      1. Enter enterprise credentials when prompted.
         1. Note: Users with an active IDP session will not be prompted to enter credentials.
         2. Successful identity verification via the enterprise IDP will direct you back to InfraLink and complete your User Account login.
   2. Internal account users will be directed to a sign-in page
      1. Enter Login Name and Password when prompted.
      2. Click Sign In.

...