Res 2010-078 - Laserfiche WebLink

Home Browse Search

RFA 210 -006 Authentication. The CEO portal uses two levels of authentication: • Authentication using a Company ID, User ID, and password. • Strong authentication or two- factor authentication using RSA SecurlD cards. CEO services such as Foreign Exchange or ACH are examples of services that are considered "high risk" and require strong authentication. Users of these services must possess an RSA SecurlD card and enter a passcode which is generated by the card after the user enters his /her User PIN. User logins and all CEO session activity are conducted using 128 -bit SSL encryption. During login or when upgrading from light to strong authentication, passwords or token passcodes are masked for security reasons. Additionally, all passwords are stored on our databases using one -way hashing. Authorization. CEO customers determine who can access protected resources on behalf of their company and what resources can be accessed. These instructions can be delivered to Wells Fargo to establish the entitlements for each user, or the company can create the user IDs and assign privileges using the CEO Self Administration service. Unique keys, such as Company ID, are used to identify and separate each customer's data. Application logic, in conjunction with entitlement information, is used to control access to the data. 2. Can repetitive templates be created? Do repetitive or non - repetitive wires require additional authorization besides on -line? Yes, templates can be created. No additional authorization is required for repetitive or non - repetitive wires. While there is not a "maximum" of allowed templates, the user experience is not as clear when the CEO company profile goes past 300. Why? Only the first 300 templates are displayed on the Initiate Single Wire screen in the Template dropdown. The user can access more than 300 templates; they must search for the template name. 3. What authorization features are available on wires? Do you require dual authorization? CEO customers determine who can access protected resources on behalf of their company and what resources can be accessed. These instructions can be delivered to Wells Fargo to establish the entitlements for each user, or the company can create the user IDs and assign privileges using the CEO Self Administration service. Unique keys, such as Company ID, are used to identify and separate each customer's data. Application logic, in conjunction with entitlement information, is used to control access to the data. 4. Is future dating of wires available? How far in advance? Repetitive and non - repetitive?