Process for requesting Samsung Corp AD to Login into Kosmos Console

Overview #

This document captures the steps required for Internal customers who does not have Corp AD for accessing the Kosmos Console using Samsung Corp AD login.

Technical requirements #

• Access to Windows VM:

  • Required for logging into SVPN and requesting Corp AD.
  • Windows VM access should be requested as part of the onboarding ticket in ServiceNow raised by the manager.
  • Alternatively, employees can request it through a general ServiceNow ticket to the IT team.

  Important: Employees need a Windows VM to access the SVPN, request a Corp AD account, and access SCOP.

• Access to SPAV VPN:

  You need access to spav-alltraffic.joyent.us VPN for accessing the Kosmos user console: https://console.kosmos.spcplatform.com/login . This is currently required only for the production environment.

  “SPAV ALL TRAFFIC” VPN is configured by the Joyent ISRE team and can be requested via ServiceNow (usually by the team manager).

  • If you are external customer and need access to the Kosmos console, your organization need to be part of ACL which Kosmos team maintains. For details, you can reach out to kosmospmo@joyent.com

• Access to a browser: Required for requesting the Corp AD account.

  Note: You do not need a Windows VM for this step.

Step 1: Request for Knox ID and Windows VM #

1. Check with the HR or IT team (@Amy Hsueh, @Cris Nevins, @Irina Katsev) to verify if the employee already has a Knox ID.

   • New employees generally won’t have a Knox ID.
   • Existing employees might already have one (e.g., for accessing Joyent Office Mountain View).
   • If a Knox ID exists, skip to Step 3.

2. If a Windows VM is not configured, request one through a ServiceNow ticket to the IT team.

Important:

• If a Knox ID already exists, ensure the employee’s phone number is correctly updated.
• Contact the IT team (@Irina Katsev) if updates are needed to ensure OTP delivery during password change or Corp AD creation.

Step 2: Requesting Knox ID (if not existing) #

If no Knox ID exists, request it through the HR team.

1. The employee or manager should send an email to HR (@Amy Hsueh, @Nicole Arredondo, and @Cris Nevins) requesting a new Knox ID.
2. HR will share a Knox Account Request Form (Excel) to be filled out by the employee.
   • The form should be submitted back to HR after completion.
   • Always verify with HR if there is a newer version of the form.
3. HR submits the form to the Knox Support Portal for ID creation.
4. After creation, the IT OSS team (@Irina Katsev) configures the Knox ID and shares the ID and password details with HR, who communicates it to the employee.
5. Confirm that the employee’s mobile number is correctly updated in the Knox system.
6. Work with @Irina Katsev to configure the Windows VM if not already available.

Step 3: Requesting Corp AD account #

Once the Knox ID is created, request a Corp AD account using the Self-Service Portal: https://corpadpss.secsso.net/

Instructions #

1. Log in to the Windows VM and connect to the SVPN system.
2. Click “Go to IT4U AD account application” on the portal.
   • Contact the PMO if this link doesn’t redirect correctly.
3. Enter the Knox ID and password.
   • For first-time login, reset the password following the on-screen instructions.

Troubleshooting Tip: See the “Troubleshooting errors” section below for common login issues.

Password reset steps #

1. Click Change Password.

2. Enter Knox ID and Captcha, then click Next.

3. Choose Email ID as the verification option and click Next.

   Note:

   • If your Samsung email ID is displayed but you cannot access it, contact @Irina Katsev for the authentication code.
   • Alternatively, if your mobile number is updated, use the SMS verification option.
   • The Knox system may take up to one business day to sync with the Corp AD system.

4. Enter the verification code (email/SMS) and click Next.

5. Click Change Password, enter a new password, and confirm it.

6. Return to the main tab and log in using the new credentials.

MFA setup #

After authentication, set up Multi-Factor Authentication (MFA):

1. Click Getting Started.

2. Accept the Terms of Use and click OK.

3. Download and install the SEC MFA Application for push notifications.

4. Enter the Authentication ID and Verification Code from the app into the web portal.

5. Set up a second MFA method (SMS registration):

   • Select your country and enter your phone number.
   • Click Certification Request, enter the SMS code, and click Certification.

   Tip: SMS registration is often more reliable than push notifications.

6. Complete SMS registration.

7. Authenticate using MFA. If the push notification fails, select Authenticate in another way and use SMS verification.

8. Once successful, a confirmation screen will appear.

Logging into Kosmos Console #

1. Visit https://console.kosmos.spcplatform.com/login .
2. Click Samsung AD Login.
3. Authenticate using the same username and password as your Knox ID.
4. Once logged in, you’ll be redirected to the Kosmos Console dashboard.

Troubleshooting errors #

If clicking “Go to IT4U AD account application” does not work:

1. Try logging into your Knox email — this should trigger an installer automatically.
2. If the installer doesn’t trigger, follow these steps to run it manually:
   • Go to Support
   • Click Utilities
   • Select Knox Portal initial installation program, then download and install it.
3. After installation, visit https://corpadpss.secsso.net/ADHelper again — it should now work.

Edit this page on GitHub