Role of Account Management at ERCOT Market Participant Identity Management Overview (MPIM)

Role of Account Management at ERCOTMarket Participant Identity Management Overview (MPIM)

MPIM OVERVIEW Page 2

Introduction

This tour will explain:

– The User Interface (UI)

– Business functions allowed by the system

– When to expect Market Participant communications

– Contact information for Help

Welcome to Texas Market Link (TML)Market Participant Identity Management

(MPIM)

The following slides provide a tour of the new MPIM application to familiarize

you with managing your USA certificate and your users certificates. It should

be used as a compliment to the Introduction and Use of Market Participant

Identity Management (MPIM) and Digital Certificates document.


Overview Objectives

This overview presentation provides how to:Access MPIM

Receive your ERCOT Digital Certificate (DC)

Create a new MP User

Create DC for MP User

Modify a current MP User’s information and Roles

Terminate and remove all access for a MP User

Add or revoke a MP User’s certificate

Run different reports for your entity


Current vs. New Digital Certificate Functionality

Before Implementation After Implementation

Digital Certificates (DC) were shipped via Fed

Ex in 5 – 6 business days from ERCOT

authorization.

Receive two emails one containing the URL and

the other containing the password. DC can then

be picked up the same day they are authorized.

MP USA could not revoke DC MP USA has the ability to revoke DC, with the

exception of another MP USA.

The MP USA would access the TML to request

User DC.

The MP USA will access MPIM via TML link to

request User DC.

The MP USA had the ability to have a

centralized mailbox for all DC.

Digital Certificates will now be delivered to each

user’s email address for their DC.

The MP USA managed all User DC renewals. Individual User can manage their own DC

renewal.

No reporting functions. MP USA can now run reports for their entity.


Overview Topics

• Receiving your MP USA Digital Certificate• Accessing MPIM• Managing Users

– Create User Accounts– Grant Certificates– Modify User Accounts– Terminate User Accounts– Run Reports– MPIM Errors

• Losing MP USA access• Reference Documents / Important Contact information


Receiving a Digital Certificate

Once ERCOT has received a Market Participant’sApplication or Notice of Change of Information form(NCI), then ERCOT will begin the process of issuingthe Digital Certificate (DC) for the MP USA(s) upon ERCOT authorization.

ERCOT USA will then enroll the new USA(s) via the Market Participant Identity Management (MPIM) system.


Receiving a Digital Certificate (cont’d)

From: [email protected]

Date: 10/01/2007 12:00 PM

To: [email protected]

Cc:

Subject: MPIM Notification: <Type> Creation <User (First Name Last Name)>

Dear <User (First Name Last Name)>,

Your account has successfully been created. Please contact your requestor <Requestor (First name Last Name)>, regarding the information for your account.

If you have a question related to this email, then please contact the ERCOT Helpdesk at (512) 248-6800.

Thank you,

MPIM Administrator

At this point, the MP USA does not have a Digital Certificate.

After ERCOT USA has created an MP USA Account, the MP USA will receive an

informational email notification from MPIM similar to the one below.



Upon authorization the ERCOT USA will then grant the MP USA a DC. Two notifications will be sent to the MP USA; one email containing a certificate URL link and ...

From: [email protected]: 10/01/2007 12:00 PMTo: [email protected]:Subject: MPIM Notification: Certificate Pickup URL<User (First Name Last Name)>Dear <User (First Name Last Name)>,

Your VeriSign Digital Certificate has been requested. Please contact your requestor <Requestor (First Name Last Name)> for the next steps to download your digital certificate.

Certificate URL: <Certificate URL>


Thank you,MPIM Administrator

Email containing certificate URL



… another containing a certificate password.

From: [email protected]

Date: 10/01/2007 12:00 PM

To: [email protected]

Cc:

Subject: MPIM Notification: Certificate Pickup <User (First Name Last Name)>

Dear <User (First Name Last Name)>,

Your VeriSign Digital Certificate has been requested. Please contact your <Requestor (First Name Last Name)> for the next steps to download your digital certificate.

Certificate URL Password: <Random generated password>


Thank you,

MPIM Administrator

Email containing certificate password

•A one time use password for ERCOT Digital Certificate is valid for 5 Days.•On day 6, MP USA will have to contact ERCOT Client Services at (512) 248-3900.



To download new DC, MP USA will contact ERCOT Client Services for

their Username / Employee ID. Next click on the URL in the email and

the ERCOT Digital Certificate (EDC) page will load. Using the

Password from the email, the Employee ID from ERCOT Client

Services and the DUNS number, fill out the login screen and download

the certificate.


Receiving a Digital Certificate – EDC

Click Yes


Receiving a Digital Certificate – EDC (cont’d)

Click OK


Receiving a Digital Certificate – EDC (cont’d)

Do not close browser during download!


Receiving a Digital Certificate – EDC

At this point, your Digital Certificate has been downloaded.

Click Yes


Overview Topics





Accessing MPIM

• Only users that have completed the mandatory paperwork and are in compliance with ERCOT Protocols, “User Security Administrator and Digital Certificates” regarding User Security Administrators (USA), will be granted access to MPIM.

• Each Market Participant must appoint a USA and has the option to register a Secondary USA. A Secondary USA is encouraged because they will prevent the loss of ERCOT resource functionality in the event the Primary USA is unavailable or leaves.

• Once the MP USA has been created in MPIM and receives their Digital Certificate, they can access MPIM through a link on TML. Please note that the MPIM system will eventually be accessed through the Nodal Market Information System (MIS).


Accessing MPIM as a MP USA

Navigate to the TML Portal by inserting the following URL in a browser

window: https://tml.ercot.com.

Once prompted, select a certificate that corresponds to the entity you

are managing, highlight the MP USA certificate, and click OK.


Accessing MPIM - TML

Once in TML, click on the Identity Management link.


Overview Topics





Managing Users – Create MPIM User Account

MP USA clicks on the Create link.

For more details to create MPIM User Account, please refer to Section 2.3 “Create MPIM User Account” of the Introduction and Use of Market Participant Identity Management (MPIM) and Digital Certificates document.


Managing Users – Create MPIM User Account (cont’d)

MP USA fills out the required fields, assigns roles and clicks on the Submit button. Note: The MP USA can select the Role Information link to learn which applications/resources the MP User will access by receiving the role(s).

Adds a selected role

Removes a selected role

Adds all roles Removes all roles

User’s Email Address


Managing Users – Create MPIM User Account

From: [email protected]: 10/01/2007 12:00 PMTo: [email protected]:Subject: MPIM Notification: User Creation <User First Name User Last Name>Dear <User (First Name Last Name)>,Your account has successfully been created. Please contact your USA, <Requestor (First name Last Name)>, regarding the information for your account.If you have a question related to this email, please contact the ERCOT Helpdesk at (512) 248-6800.Thank you,MPIM Administrator

After the MP User account is successfully created, the following e-mail is generated and sent to the MP User. The notification is sent to the e-mail address provided during account creation.

======================================================================


Managing Users – Create Application Programming Interface (API) MPIM User Account

In order to create an API account within the MPIM system, the MP USA

will start at the MPIM Manage User screen.

For more details to create MPIM API Account, please refer to Section 2.4 “Create Application Programming Interface (API) MPIM Account” of the Introduction and Use of Market Participant Identity Management (MPIM) and Digital Certificates document.


Managing Users – Create Application Programming Interface (API) MPIM User Account (cont’d)

• The API_ text will be prepended to the employee ID when the request is submitted.Employee ID should be the server or application name. EXAMPLES: API_SERVER_NAME or API_APPLICATION_NAME (min 4/max 19 characters)

• First Name, Last Name and e-mail address should the contact information for the server/application owner.

MP USA checks the API check box, fills out the required fields, assigns roles and clicks on the Submit button.

Heselmeyer, Sarah

Email address of API server manager


Managing Users – Create Application Programming Interface (API) MPIM User Account (cont’d)

After the API/MP User account is successfully created, the following e-mail is generated and sent to the User. The notification is sent to the e-mail address provided during account creation.

From: [email protected]: 10/01/2007 12:00 PMTo: [email protected]:Subject: MPIM Notification: User Creation <User First Name User Last Name>Dear <User (First Name Last Name)>,Your account has successfully been created. Please contact your USA, <Requestor (First name Last Name)>, regarding the information for your account.If you have a question related to this email, please contact the ERCOT Helpdesk at (512) 248-6800.Thank you,MPIM Administrator


Overview Topics





Managing Users – Creating User Certificate in MPIM

After user account is created the MP USA is ready to create the associated users DC. MP USA clicks on the Certificates link.

For more details to create MPIM User and API Digital Certificates, please refer to Section 2.6.1 “Creating User Certificate” in the Introduction and Use of Market Participant Identity Management (MPIM) and Digital Certificates document.


Managing Users – Creating User Certificate in MPIM (cont’d)

MP USA enters search parameters for a User (employee id, first name, or last name). MP USA clicks the Search button.



• Multiple users can be granted certificates.• After the certificate is granted, the user must download the certificate before it will be considered Valid.• Certificates in any status but Valid or Revoking will appear on the Request Certificates page.• Certificates in Valid or Revoking status will appear on the Revoke Certificate page when the radio button

is selected.

MP USA checks the boxes of the User(s) for whom certificates should be generated.MP USA clicks the Submit button.



From: [email protected]: 10/01/2007 12:00 PMTo: [email protected]:Subject: MPIM Notification: Certificate Pickup <User (First Name Last Name)>Dear <User (First Name Last Name)>,Your VeriSign Digital Certificate has been requested. Please contact your requestor <Requestor (First Name Last Name)> for the next steps to download your digital certificate. Certificate URL Password: <Random generated password>If you have a question related to this email, then please contact the ERCOT Helpdesk at (512) 248-6800.

From: [email protected]: 10/01/2007 12:00 PMTo: [email protected]:Subject: MPIM Notification: Certificate Pickup URL<User (First Name Last Name)>Dear <User (First Name Last Name)>,Your VeriSign Digital Certificate has been requested. Please contact your requestor <Requestor (First Name Last Name)> for the next steps to download your digital certificate.Certificate URL: <Certificate URL>If you have a question related to this email, then please contact the ERCOT Helpdesk at (512) 248-6800.Thank you,MPIM Administrator

The MP User receives the following two e-mails with information on how to retrieve their Digital Certificate.

•A one time use password for Digital Certificate is valid for 5 Days.•On day 6, the User will have to contact their MP USA. MP USA will re-issue certificate for the User.•User will contact MP USA for their Employee ID.


Overview Topics





Managing Users – Modifying a User and API MPIM Account with Roles

MP USA clicks on the Modify link.

For more details to Modify MPIM User, please refer to Section 2.5 “Modifying an User and API MPIM Account with Roles” in the Introduction and Use of Market Participant Identity Management (MPIM) and Digital Certificates document.


Managing Users – Modifying a User and API MPIM Account with Roles (cont’d)




MP USA selects a User.MP USA clicks on the Submit button.



MP USA modifies the required fields if needed.

If a change is made to your First/Last Name or Email address through a modification, the MP USA must then revoke and reissue a new certificate through MPIM. This will update any new changes on the Digital Certificate.



After the user account is successfully modified, the following e-mail will be sent to the User.**NOTE**: The assignment of roles may generate additional e-mails.

From: [email protected]: 10/01/2007 12:00 PMTo: [email protected]:Subject: MPIM Notification: User Modified <User (First Name Last Name)>Dear <User (First Name Last Name)>,Your account has successfully been modified. Please contact your USA, <Requestor (First name Last Name)>, regarding the information for your account.If you have a question related to this email, please contact the ERCOT Helpdesk at 512-248-6800.Thank you,MPIM Administrator


Overview Topics

• Receiving your Digital Certificate• Accessing MPIM• Managing Users




Managing Users – Terminating a MPIM User Account

MP USA clicks on the Terminate link.

For more details to Terminate MPIM User Digital Certificates, please refer to Section 2.7 “Terminating a MPIM User Account” in the Introduction and Use of Market Participant Identity Management (MPIM) and Digital Certificates document.


Managing Users – Terminating a MPIM User Account (cont’d)




MP USA checks the boxes of the User(s) they would like to terminate.MP USA clicks on the Submit button.

**NOTE**: Terminating a user will remove the user from the MPIM system and also revoke the user’s certificate and roles.**NOTE**: Once a user is Terminated, the account cannot be reactivated. A new account will need to be created for the User with a new Employee ID.



MPIM sends a revoke certificate email to the MP USA.

From: [email protected]: 10/01/2007 12:00 PMTo: [email protected]:Subject: MPIM Notification: Certificate Revoked <User (First Name Last Name)>Dear <Requestor (First Name Last Name)>,The certificate belonging to <User (First Name Last Name)> has successfully been revoked. If you have a question related to this email, then please contact the ERCOT Helpdesk (512) 248-6800.Thank you,MPIM Administrator

From: [email protected]: 10/01/2007 12:00 PMTo: [email protected]:Subject: MPIM Notification: User Disabled <User (First Name Last Name)>Dear <Requestor (First Name Last Name)>,The account belonging to <User (First Name Last Name)> has successfully been disabled. If the User had any resource accounts and/or certificates, then those accounts and certificates have also been successfully revoked.If you have a question related to this email, then please contact the ERCOT Helpdesk at (512) 248-6800.Thank you,MPIM Administrator

MPIM sends a successful notification to the MP USA.


Overview Topics





Managing Users – Reports

MP USA clicks on the Reports link.

For more details to Run Reports for MPIM User Digital Certificates, please refer to Section 2.8 “Reporting” in the Introduction and Use of Market Participant Identity Management (MPIM) and Digital Certificates document.


Managing Users – Reports (cont’d)

MP USA clicks the link for the desired Report Type

• Each report can be viewed in three formats: on screen, csv, and pdf.

• Because some entities have many users, the reports may take longer than a few seconds to load.

• Current Status Report will contain all Active Users for the Market Participant.

• Full Report will contain all users, including inactive users for the Market Participant.



• MP USA right clicks on desired Report Type and Save Target to desired location.

• Open Excel and click on Data Tab

• Select Import External Data

• Click on Import Data

• Go to Desired File to be imported and click Open to import file

If your organization’s ERCOT registered unique identifier (DUNs number plus four) contains 13 digits, it will appear in scientific notation. Also, if the unique identifier begins with a zero; the leading zeros will be cut off. To correct this in the downloaded MPIM reports, please follow the steps below.



•Text import wizard should appear, choose file type as Delimited



• Select Delimiters as Tab and Comma then Click next



• In Data Preview select third column in Column Data Format select Text then

click Next and Finish



• Click ok to Import Data into Excel and Duns number should display correctly


Managing Users – Summary Diagram

This diagram describes the duties of an MP USA and their relationship to the MP User through MPIM. MPIM will automatically generate notifications to the MP User’s email address.

Note: The specific format of each of these emails can be found in the Introduction and Use of Market Participant Identity Management (MPIM) and Digital Certificates Document.

MP USA TML

Access MPIM through TML using an MP USA Digital

Cert.

Perform MP USA duties

MPIM MP MP User

Email with URLEmail with Cert

Password

Email confirming the

MP User is created

Notifications sent to MP User from MPIM

Create – Grant Roles

Modify – Grant Roles

Terminate

Grant / Revoke Certificate

Email confirming the MP User has

changed

Email confirming the MP has been

terminated

Email confirming the MP User Cert

has been revoked

Email confirming the MP User Cert

has been revoked

MP User

Access applications using Certificate

Reports


Overview Topics





Managing Users – MPIM Errors

Below are examples of Error messages that may occur if the MP USA does not enter all required fields in the MPIM tool.

• Each field in MPIM has specific form edits that confirm that the information entered meets requirements.

• Some fields have multiple edits which can be generated depending on the information that is entered.


Managing Users - MPIM Errors (cont’d)

When MPIM does not complete a request because of connectivity or

configuration issues, an error notification is sent to the MP USA and to the

Helpdesk. The MP USA will need to contact the ERCOT Helpdesk for more

information.


Overview Topics





Losing MP USA Access - Assignment

When Market Participant request NCI for changes to MP USA the ERCOT USA will remove their USA role. The following email is received by the former MP USA.


Contacting ERCOT

• ERCOT Helpdesk – Technical Issues– (512) 248-6800 option 3– Send an email to [email protected]– Contact the ERCOT Helpdesk with any technical issues. (The

site is giving me this error.)

• ERCOT Client Services – Business Issues– (512) 248-3900– Contact Client Services with any questions about business

processes. (How do I….?)

• NOTE: Only the MP USA should contact ERCOT in regards to

MPIM and Digital Certificate problems.


Questions?