Accessing high-security defense, aerospace, and life sciences networks requires navigating specific identity frameworks. If you're trying to reach your partner portal, you'll likely use the Managed Access Gateway (MAG) or the Secure Access Manager (SAM). Knowing how to handle your credentials, multi-factor tokens, and account pairing correctly saves you from frustrating lockouts and audit delays.
This guide breaks down the technical steps for account activation, credential management, troubleshooting failed logins, and linking multiple corporate profiles without violating compliance rules.
Exostar Access Platforms: MAG vs. SAM
Exostar partitions its portal ecosystem based on your industry and the applications you need to reach. Understanding which platform houses your account prevents common routing mistakes.
- Managed Access Gateway (MAG): Primarily built for aerospace, defense, and manufacturing partners needing compliance with frameworks like NIST SP 800-171, ITAR, and DFARS. MAG acts as a central hub where a single login lets you connect across multiple defense contractors.
- Secure Access Manager (SAM): Often utilized within life sciences, clinical trials, and healthcare sectors. SAM provides streamlined single sign-on (SSO) for clinical researchers, sponsors, and contract research organizations (CROs) managing multi-site studies.
Before attempting to log in at the Exostar Secure Access Portal, verify your invitation email to confirm whether your credentials belong to a MAG or SAM organization.
Step-by-Step Account Activation and First Login
If your organization recently onboarded you, your account requires activation before standard credentials work.
- Locate the Invitation Email: Check your inbox for an automated message from Exostar containing your temporary credentials or an invitation link. Click the Accept Invitation button.
- Review Organization Data: Your browser opens a registration confirmation screen. Verify your legal business name, user ID, and contact details for accuracy.
- Set Your Master Password: Once approved, you'll receive an activation link. Click Activate My Account, establish a strong password complying with length and complexity rules, and submit it.
- Log In to the Dashboard: Navigate to the main portal page, input your assigned User ID or registered email address, and enter your new password to view your active application tiles.
Configuring Multi-Factor Authentication (MFA)
Most applications sitting behind Exostar gateways enforce strict two-factor authentication (2FA). Standard passwords alone won't grant entry to sensitive project directories.
- Choose Your Credential Type: Depending on your enterprise agreement, you can use a Phone One-Time Password (OTP) via SMS, a hardware token, or a Federated Identity Service (FIS) digital certificate.
- Enroll a Device: Inside your dashboard, head to the credential management tab. Select your partner requirements and input your direct phone number or token serial number.
- Complete Activation: Enter the verification code sent to your device to bind the credential to your user profile. Moving forward, every session prompt requires this secondary token.
Connecting and Managing Multiple Accounts
Many contractors and clinical researchers work with multiple sponsor organizations simultaneously, which often creates fragmented profiles. Exostar allows you to link separate child accounts under a single parent identity.
- Log into your parent MAG account at the Exostar Portal.
- Select the My Account tab, then navigate to the Connect Accounts sub-tab.
- Review the list of eligible child accounts matching your verified email domain.
- Input the password for the child account you want to merge and click Connect Account.
Once linked, you can switch between client spaces using your primary credentials without needing separate browser profiles or redundant tokens.
Troubleshooting Common Login Roadblocks
- Locked Accounts: Entering incorrect passwords repeatedly triggers an automated security lockout. Contact your internal Organization Administrator (OA) to clear your lock status.
- Missing OTP Codes: If SMS codes fail to arrive, verify your carrier signal or check whether corporate firewalls block automated short-code messages. Switch to an authenticator app token if permitted by your security policy.
- Expired Credentials: Digital certificates and physical hardware tokens have expiration dates. Renew your license key through the credential purchase portal well before your current token expires.
Frequently Asked Questions
What should I do if I forget my Exostar User ID?
Your User ID is typically your primary corporate email address. If system prompts reject your email, check your initial onboarding confirmation message or contact your organization's designated administrator to retrieve your exact profile identifier.
Can I share my Exostar login with a colleague?
No. Sharing credentials violates regulatory compliance standards (such as ITAR and NIST frameworks). Each individual must maintain a distinct, verified identity within the system for proper audit tracking.
Why does my session keep timing out?
Exostar enforces strict security timeouts to protect sensitive defense and clinical data. Inactive sessions automatically terminate after a designated period, requiring you to re-authenticate with your password and MFA token.
How do I update my registered phone number for MFA?
Log into your dashboard, navigate to your security settings under credential management, and choose the option to update your phone device or secondary authentication method. You may need to verify the change via your existing active token.
