What is Fortify?

Fortify is a new Digital Identity Provider (IDP) bringing modern authentication concepts to our users. 

Fortify simplifies authentication while offering modern security practices including Two-Factor Authentication (2FA), a subset of Multi-Factor Authentication (MFA), and external logins, allowing users to authenticate into LCPtracker products through trusted Third-Party Authenticators (TPA).

How do I or another user get onboarded to Fortify?

In general, all users need to be invited by another user from an LCPtracker Inc. product to initiate their Fortify onboarding.

For example, in LCPtracker Pro:

• Admins are invited by LCPtracker employees upon new database creation.
• Admins can invite other Admins into the database.
• Admins can invite their Contractors into the database.
• Contractors can invite their additional users or subcontractors into the database.

How does the Fortify onboarding process begin?

When a user gets invited by an elevated user from an LCPtracker product, you will receive a Fortify Welcome email and an Onboarding email that prompts them to complete their Fortify profile by onboarding.

The Fortify Onboarding email contains your username that was entered by the elevated user and a temporary password.

Note: If you are an existing user, you will only receive one email (Onboarding Email)

How often does Fortify onboarding occur?

Fortify onboarding only needs to be done once per user.

What happens during the Fortify onboarding process?

1. Required: Users will:
   1. Accept our Terms of Use and Privacy Policy
   2. Update Profile.
   3. Set up a password.
   4. Set up Two-Step Verification (Select one - Email vs Authenticator app)
2. Required: 10 Recovery Codes will be generated. 
   1. These can be used if you get locked out of your account.

Note: It is recommended for users to generate new recovery codes before using the last one.

1. Sometimes Required: Users can set up an External Provider if an agency requires them to login with the agency’s Single Sign-On (SSO) platform.
   1. This changes the login process for users of an external provider.

Note: If you utilize an alphanumeric username (i.e. contractor license # or phone #) to log in then you must update this to an email address prior to the Fortify onboarding process.

Can I bypass Fortify onboarding and access my LCP apps?

No, users are required to complete Fortify onboarding before accessing LCP apps. The onboarding process ensures users agree to our Terms of Use and Privacy Policy.

Some users may be required to set up an agency’s SSO as an External Provider. 

What happens after I complete onboarding?

You must click on the “Go to LCPtracker User Dashboard” button to be directed to the dashboard and access your approved LCPtracker Inc. apps.

1. The dashboard will have all apps that are integrated with Fortify.
   1. LCPtracker Pro (Daily Reporter/OnSite mobile apps)
   2. LCPcertified
   3. Workforce Manager 
   4. Active insight 
   5. Case Manager 

Note: You will only see the app tiles that your account has access to. 

If I have previously onboarded Fortify, will I be able to use my existing password after being migrated to the new enhanced Fortify?

No, you cannot reuse your existing password.

Note: You must also meet the new password requirement of 15 characters.

How many login pages are there?

Although the existing LCPtracker and LCPcertified login page will continue to work, there is now a centralized “User Portal” login page.

What happens during the Fortify login process?

Users will be asked to enter the information below to authenticate into Fortify:

1. Username (should be the same as their work email address)
2. Password (should have been updated during the onboarding process)
3. Email Verification Code or 2FA App Code or Recovery Code
   1. You would receive a Verification Code via email if the Email Two-Factor Authentication was enabled during the onboarding process.
   2. Or, if the Two-Factor Authentication Application (2FA app) has been setup during the onboarding process, then you would be able to access a Verification Code through the 2FA app.
   3. 1 of 10 one-time-use Recovery Codes can be entered to authenticate into the account.

Note: It is recommended for users to generate new recovery codes before using the last one.

OR

If External Provider is required by an agency:

1. User would click on the ‘Use External Provider’ link on the login page.
2. Users enter their SSO credentials provided by that agency.

Who can login through Fortify?

Only users that have been invited by an elevated user and completed the Fortify onboarding.

I have a group inbox; can I share that account with coworkers?

No, each user must have a unique username associated with their email address.

If you (or one of your colleagues) do not have an account, you will need to get an invite from (set up by) a user with elevated rights to get the Fortify onboarding email.

Tips to receive our emails, click here.

Do I have to authenticate every time I log in? Can it be turned off?

Yes, for security reasons you must authenticate using one of the two available verification options (Email vs Authenticator app)

No, it cannot be turned off as you must use one of the two available authentication options.

What do I do if I am not receiving any emails (i.e., authentication code or password reset)?

Ensure you have added @lcptracker.com domain as a safe sender in your email.

To see tips to receive our emails, click here. 

Can I use the User Portal Login page to access Fortify enabled accounts and Legacy accounts? (Legacy is define as those users/accounts where Fortify has not been enabled by a user with elevated rights)

Yes, if the username/email address exists in Fortify due to a successful onboard and such username/email is associated to a Legacy account then you can login through User Portal and access the Dashboard.

In the Dashboard you can click on the applicable product tile regardless of the account being Fortify enabled or Legacy.

Can Legacy users access their account through the User Portal?

Yes, User Portal is the centralized access point to login and is capable of distinguishing between Fortify enabled users and Legacy users.

What is the Fortify Forgot Password process?

Users that forgot their password will go through the Forgot Password process to reset their password to login.

Who can go through the Fortify Forgot Password process?

Only users that have been invited by an elevated user and completed the Fortify onboarding.

Note: If you are a Legacy user, then you can reset your password by following the existing legacy password reset process.

Legacy is defined as a user/account where Fortify has not been enabled by a user with elevated rights.

What happens during the Fortify Forgot Password process?

Users will be asked for the information below to begin resetting their password:

1. On the User Portal Login page, users will enter their Username and click Continue.
2. Then users can click on the “Rese Here” link
3. You will then be asked to enter your Username to receive a Forgot Password.