#######
Access 
#######

The |mrosh| can be accessed via an internet browser at: https://mrosmarthub.iata.org. The following figure shows the login screen.

.. figure:: img/smarthub_login.png
   :height: 200
   :alt: Login screen of |mrosh|
   :align: center

   Login screen of |mrosh|

The administration of user accounts is done by the company administrator. The company administrator is responsible for authorizing users to the different submodules of the |mrosh| based on their role in the company. 
Every account on |mrosh| is personalized and can only be used by a single individual. 

.. _signIn:

Sign in
================
To sign in to the |mrosh|, the user has to enter their username consisting of the company abbreviation and a three-digit number and the password. On initial login, all users are required to change their initial password to a new one.

Two-factor authentication
---------------------------
The |mrosh| utilizes two-factor authentication implementing TOTP. The following manual is written for Google Authenticator. For similar apps, the process is basically the same.

.. note::
   For users with access to the Evaluator module, the usage of 2-factor authentication is mandatory. For all other users, the usage of 2-factor-authentication is disabled by default. However, based on company-internal security regulations, company administrators
   may require 2-factor-authentication for all their users. If you are not sure if this applies to you, please get in touch with your company administrator. 

.. figure:: img/google_auth_list.png
   :height: 300
   :alt: Overview Google Authenticator
   :align: center

   Overview Google Authenticator

* Download and install the application
* Open the app and add a new account by clicking on the red button (see Fig. Overview Google Authenticator)
* Choose "Scan a barcode" option (see Fig. Google Authenticator - select new account type)
* Scan the barcode provided by the |mrosh|

.. figure:: img/google_auth_new.png
   :height: 300
   :alt: Google Authenticator - select new account type
   :align: center

   Google Authenticator - select new account type

After clicking "add", a new entry is available on the main screen providing a 6-digit key that can be entered during the sign-in to the |mrosh| for authentication.

Link to Google Authenticator app:

* Android: https://play.google.com/store/apps/details?id=com.google
* iOS: https://itunes.apple.com/us/app/google-authenticator/id388497605?mt=8

Password handling
------------------

If a user lost their password, they can reset it by entering their e-mail address at https://mrosmarthub.iata.org/login/reset. 
An e-mail with instructions to reset their password will be sent to their e-mail account. 

If they did not receive an e-mail within 10 minutes, please check your "Junk Mail" or spam folder and/or add opremic.com and/or |noreply-mail| to the list of allowed senders.

Main menu
=========
The main menu has been designed for easy navigation within the |mrosh| and can be accessed from any module. It is categorized into the different available modules.

Hovering over a module shows the available pages for the selected module. Clicking on them will redirect the user to the specific page.

The right side of the menu contains additional features: The :ref:`ref_compactEvaluation`, the user and company settings, the :ref:`supportPasswordChange`, and the sign-out.

Sign out
=======================
To sign out from |mrosh| click on sign out. This terminates your current session and you have to login again to use the platform.

.. _supportPasswordChange:

Password change
=======================
Clicking on this menu entry will redirect you to the password change module. Here can change your password here by entering the current one and the new one. 

.. figure:: img/support_password_change.png
   :figwidth: image
   :alt: Password change module
   :align: center

   Password change module