Frequently Asked Questions
FMCSA E-Authentication Program
- What is E-Authentication?
- What does "identity validation" mean?
- Why are we doing this and why now?
- What is the future of E-Authentication regarding FMCSA and its applications?
- What is a "User Credential"?
- Who are FMCSA's User Credential Providers?
- How do I receive a User Credential from ORC?
- How much effort will ORC process require?
- Why do I need to supply my SSN or my company's Employer Identification Number? (Carriers Only)
- Is E-Authentication secure?
- What do I do if I can't log in to the FMCSA Portal with my credential?
- What if I lose or forget my password for an ORC-issued credential?
1. What is E-Authentication?
Electronic authentication (E-Authentication) is simply about identity validation, particularly about the ability to verify and validate one’s identity on multiple systems.
2. What does "identity validation" mean?
Identity validation means that an electronic system can determine whether a user has the privileges necessary to use that system—and it also means the process of verifying a user’s identity before allowing him or her to use that system. In our case, identity validation means that you must either prove who you are by using an E-Authentication credential you already have, such as from Employee Express, or by completing the application for a user credential from ORC. Inc including presenting yourself to a Notary Public and submitting the notarized form.
3. Why are we doing this and why now?
The E-Authentication effort is a Congressional mandate and our implementation of E-Authentication will make it easier and more efficient for Agency and public users to access our systems in the future. E-Authentication will reduce the resources required to create separate identities for users on each system—and ultimately allow the use of personal “credentials” (such as IDs and passwords) from entities like Employer Express and banking institutions on a range of Federal and private systems
4. What is the future of E-Authentication regarding FMCSA and its applications?
FMCSA's E-Authentication program is helping to set the stage for single sign-on and the eventual elimination of multiple passwords for accessing safety applications within FMCSA. Single sign-on is a core objective of the Agency’s COMPASS program that is working to better integrate our information technology with the way we do business and is set for full implementation, including the ability to use E-Authentication credentials, for late 2007.
5. What is a "User Credential"?
A user credential is a standard form of user identification that is issued by a “Credential Service Provider” upon receiving suitable proof of your identity. When validated with the user’s password, the credential will be used to access the FMCSA Portal and eventually for any other E-Authentication-enabled system participating in the E-Authentication Federation.
The E-Authentication Federation is a group of public and private organizations, including most Cabinet Departments, the Social Security Administration, Wells Fargo and Fidelity Investments, that is working to provide common access to holders of trusted credentials. It is anticipated that the Federation will provide access to a variety of useful applications and services in the months to come....
6. Who are FMCSA's User Credential Providers?
FMCSA staff are asked to use their Employee Express credentials. Carrier employees are asked to obtain credentials from ORC, Inc.
7. How do I receive a User Credential from ORC?
If you are participating on behalf of a carrier, please go to ORC's website: https://csp.orc.com./eauth/ and complete the online portion of your registration. You may then print your application and take it to a Notary Public to have your identity verified. You may use your carrier's Employer Identification Number or your Social Security Number, whichever you prefer.
Notaries operate in nearly every community in the U.S. They are often found in legal offices, banks, and real estate firms. Occasionally, they can be found in Government offices as well. They may or may not charge a fee. If you are charged, please pay the fee and pursue reimbursement through your normal channels.
ORC's documentation simply asks that the notary "verify the identity of the individual applying for this ORC credential." Please refer to section 3.C of the User Instructions for a list of specified forms of identification.
Once your registration is notarized, you will need to send it to the address listed on the form, either by Certified U.S. Mail, Federal Express, or United Parcel Service. Shortly thereafter, you will receive your credential via e-mail.
8. How much effort will ORC process require?
The effort for you is pretty simple and requires that you apply for a "User Credential" on-line, print out your application and have it notarized, then send the notarized application to ORC. Once you receive your credential, you will use it to login to the FMCSA Portal. If you have a successful login, and your company information is available for review your "test" is complete.
9. Why do I need to supply my SSN or my company's Employer Identification Number? (Carriers Only)
To be credentialed at Level 2 (the designated security level of the FMCSA Portal), you will need to uniquely identify yourself to ORC. Two of the pieces of information that contributes to this granularity are a Social Security Number and your company's Employer Identification Number. ORC will not release your personal information to any third party.
10. Is E-Authentication secure?
Yes. E-Authentication involves a very rigorous testing process and utilizes national standard encryption techniques to ensure security. Additionally, the use of a validated credential enhances the security of the systems involved.
11. What do I do if I can't log in to the FMCSA Portal with my credential?
If you are having technical difficulties or cannot log in to the FMCSA Portal with your credential, contact the FMCSA Technical Support team by calling (617) 494 – 3003, e-mailing FMCTechSup@volpe.dot.gov, or visiting http://fmcsa-ts.dot.gov.
12. What if I lose or forget my password for an ORC-issued credential?
If you remember your user ID, you may use the password reset feature available through the ORC Credential Service Provider site (https://csp.orc.com./eauth/). In the event your credential is completely forgotten or compromised, you must first notify the Technical Support team at the Volpe Center by calling (617) 494 – 3003, e-mailing FMCTechSup@volpe.dot.gov, or visiting http://fmcsa-ts.dot.gov. You will then be required to obtain a new credential from ORC.
|