REPT 21-02, Implementation of Two-Factor Authentication for the Reporting Center

Published: July 7, 2021
Effective: Pay Period 13, 2021

Summary

For non-Personal Identity Verification (PIV) Card users, as an added security enhancement, the National Finance Center (NFC) is adding two-factor authentication to the Reporting Center (RPCT). The RPCT login process has been modified to provide the two-factor authentication verification method.

Affected Systems

System

System Impact

Reporting Center

Modifications have been made to add two-factor authentication for non-PIV Card users.

Implementation

RPCT users are required to perform two-factor authentication when logging in. As part of the implementation of two-factor authentication, NFC performed a one-time email address data load from the NFC Payroll/Personnel (PPS) system to Secure All (SALL).

If the user's work email address is not available or needs updating, the RPCT will display an error message USER ID EMAIL ADDRESS INVALID, CONTACT YOUR SECURITY ASO, and a verification code will not be sent. The user's Agency Security Officer (ASO) must submit an AD-3100-R, NFC Web Applications Request for Security Access Form to the Access Management Branch (AMB). AMB will update the email address as requested on the form.

For new employees, the email address established in PPS is not going to automatically transfer to SALL. The ASO must submit a AD-3100-R Form to AMB, and AMB will add the email address as requested on the form.

A new Two-Step Authentication page has been added to the RPCT along with a Verification Code field for the user to input the one-time verification code. The verification code will be emailed to the user's work email address.

To Validate and Establish Two-Factor Authentication (for non-PIV users only):

  1. Connect to Reporting Center.

    Reporting Center Login Page

  2. Enter your User ID and Password.
  3. Select the Login button.

    An email containing a verification code will be sent to the user's work email address. The verification code will be valid for 15 minutes. The Two-Step Authentication page is displayed.

    Two-Step Authentication Page

  4. Obtain the verification code from your work email address.
  5. Enter the verification code in the Verification Code field.
  6. Select the Submit button.

    Note: If the verification code entered is incorrect, an error message will appear. The user will need to log out and create a new session if a new verification code is needed.

    Note: If the verification code is not used within 15 minutes the user will need to reauthenticate to generate a new verification code. The user will need to log out and create a new session to obtain a new verification code.

Resources

The procedure manual for this application, which is available online at the NFC Web site, is being updated to include the information in this bulletin. To view this procedure, select HR and Payroll Clients from the MyNFC drop-down menu on the NFC Home page. At the HR and Payroll Clients page, select the Publications tab and select the applicable category to access the procedure manual within the category.

Inquiries

For questions about NFC processing, authorized Servicing Personnel Office representatives should contact the NFC Contact Center at 1-855-NFC-4GOV (1-855-632-4468) or via the customer service portal at ServiceNow Portal for Federated Users and at ServiceNow Portal for Non-Federated Users.