Digital P@ss Guide

Version Date Author Update
1.0 01/03/2018 TGS/TGITS/EUS/UIS/MOB Document creation

Document update to take into account
1.1 01/09/2018 TGS/TGITS/EUS/UIS/MOB new Memority mobile app update,
addition of TS & TGP domains
1.2 20/11/2018 TGS/TGITS/EUS/UFP/INF Update following release 2.3
1. ABSTRACT .................................................................................................................... 4
2. GENERAL INTRODUCTION TO DIGITAL P@SS.......................................................... 5
3. DIGITAL P@SS VIA MOBILE ........................................................................................ 6
3.1. Introduction.................................................................................................................. 6
3.2. Prerequisites ............................................................................................................... 6
3.3. Activate your OTP ....................................................................................................... 7
3.3.1. From PC with Smart Card (VISION or other PC with smartcard reader) ................ 7
3.3.2. For external users/partners ................................................................................... 7
3.4. Enroll a mobile ............................................................................................................. 8
3.5. Use a mobile as a secured authentication means ...................................................... 13
4. DIGITAL P@SS VIA BROWSER ................................................................................. 18
4.1. Introduction................................................................................................................ 18
4.2. Enroll and use a browser as a secured authentication means ................................... 19
4.2.1. Chrome ............................................................................................................... 19
4.2.1.1. Prerequisites .................................................................................................... 19
4.2.1.2. Enrollment........................................................................................................ 19
4.2.1.3. Use Chrome as a secured authentication means ............................................. 21
4.2.2. Firefox ................................................................................................................. 24
4.2.2.1. Prerequisites .................................................................................................... 24
4.2.2.2. Enrollment........................................................................................................ 25
4.2.2.3. Use Firefox as a secured authentication means ............................................... 26
4.2.3. Internet Explorer ................................................................................................. 28
TGS/TGITS/EUS/UFP/INF 2 / 33
INTERNAL DIFFUSION THIS DOCUMENT BELONGS TO TOTAL DON’T COMMUNICATE OR COPY WITHOUT ITS AGREEMENT
4.2.3.1. Prerequisites .................................................................................................... 28
4.2.3.2. Enrollment........................................................................................................ 29
4.2.3.3. Use Internet Explorer as a secured authentication means ............................... 32
1. ABSTRACT
The Digital P@ss authentication service allows you to securely authenticate to Total group
applications which subscribed to the service.
This guide aims to guide you step by step on the registration and use of the Digital P@ss
secured authentication service.
To discover the steps to register additional secured authentication means through the Digital
P@ss portal and to unlock or reset your password please check the following guide:
https://poseidon.hubtotal.net/doc/FAQ_EN.pdf
2. GENERAL INTRODUCTION TO DIGITAL P@SS
Digital P@ss is the new centralized authentication service of Total group. It provides secured
authentication means to TOTAL web applications which subscribed to this service.
Digital P@ss allows you to authenticate transparently* on any of the following PCs: VISION,
Trading & Shipping (TS), or Total Gas & Power (TGP)
Digital P@ss can be used in two modes:

 Enroll your smartphone
 Enroll a browser
In both cases, you first need to enroll the authentication means. Once enrolled, whether it is a
browser or mobile, you will able to authenticate via Digital P@ss and access web applications
of Total group.
The enrollment is the action that aims to certify that your device can be trusted by Digital
P@ss.
*Depending on the application classification, certain applications can be accessed transparently on these PCs, and
if strong authentication is required, then the smartcard should be used to access these applications
3. DIGITAL P@SS VIA MOBILE
3.1. INTRODUCTION
The purpose of enrolling a mobile to Digital P@ss is to make it known to Digital P@ss as
yours, then you can use it as proof of your identity when you want to access Total web
applications from any PC.
3.2. PREREQUISITES
Your OTP should be activated in Digital Pass as explained in section 3.3
The “Memority” mobile application must be installed (available on App Store & Google Play)
To use the Mobile for authentication, you must have:
A smartphone or tablet Android (4.4 or later) or iOS (9.0 or later)
An internet connection on the mobile (an offline mode allows to use your
mobile to authenticate even if there is no internet connection)
An account into the targeted application
You can only enroll one mobile device per user account
3.3. ACTIVATE YOUR OTP
3.3.1. From PC with Smart Card (VISION or other PC with smartcard reader)
# Actions Screenshots
1. Launch the Digital Pass portal:

https://digitalpassport.hubtotal.net
2. Click on “My authentication means”

Note: it is very important that you have
your smart card at this step to be able to
strongly authenticate and active your
OTP
3. Click on “Create OTP Account”
4. Confirm/modify the contact email

address to which the enrollment email
will be sent, then click on submit
Note: If the contact email address is
empty, the enrollment email will be sent
to the principal email address that you
can see under “my authentication
means”
5. As soon as you receive the enrollment

email, proceed to one of the following
sections based on your need:
 Enroll a mobile
3.3.2. For external users/partners

1. To activate your first enrolled device,

please submit the service request
«Digital P@ss Secured Authentication –
Enrollment Request» through WeCare
portal.
2. As soon as you receive the enrollment

email, proceed to one of the following
sections based on your need:
 Enroll a mobile
3.4. ENROLL A MOBILE
1. Click on the link displayed in the

activation email received from “Digital
P@ss no-reply-
digitalpasspp@memority.com” following
the OTP activation step
2. Type your IGG
3. Select « Mobile ».
4. You will be redirected to the following

page with an enrollment code for mobile
and tablet.
Stay on this page and do NOT close
it.
5. Based on the type of smartphone you

have, download and install the new
“Memority” app
6. Once installed, launch the application,

ensure to “Allow” the app to send you
notifications
7. Accept the terms and conditions
8.
Using your smart phone camera, scan
the QR code obtained in step 3
9. Set a new password of 7 to 16

alphanumeric characters with at least In case you already have In case it is the first time
an enrolled browser you enroll
one digit and one letter.
WARNING! This password will be

requested at each connection, please
make sure to memorize it.
WARNING! If in the future you would like

to enroll a new browser, the password
defined in this step will be the same.
10.
If biometric scanner is detected, you will
be prompted to scan your fingerprint to
enable the feature
11. Your Smartphone is now enrolled in

Digital P@ss service and ready to be
used.
3.5. USE A MOBILE AS A SECURED AUTHENTICATION MEANS
1. Authenticate to an application via

Digital P@ss secured authentication
At your first connection through Digital
P@ss from a browser other than Internet
Explorer for VISION, you will have this
screen.
If you’re not using Vision, Total Trading

& Shipping or Total Gas & Power
workstation or don’t have access to
Total’s internal network (LAN, VPN,
Corporate Wi-Fi), choose “Other” to
authenticate using your trusted mobile.
(The selected choice is memorized and
the screen will not be displayed anymore
on this browser)
2. You will be requested to identify yourself.

Enter your TOTAL identifier (your
IGG) then click on « Next »
You can enable the “Remember me”
option to save your IGG and avoid typing
it for the next times
3. If you have a secured authentication

means enrolled on both a browser and a
mobile, you will be requested to select
the device you would like to use as your
authentication means.
In this case, select Mobile code.
4. If you have enrolled only your mobile,

you’ll be directly redirected to this page.
A message will be displayed to confirm

that a push notification has been sent to
your enrolled mobile.
Note: To ensure you accept the right
authentication request, a security code is
displayed (ex: QM-VF), which should
match the one received on your mobile.
(If your mobile doesn’t have internet
connection to receive the notification,
use the offline mode by selecting “Enter
code” on the webpage and proceed
directly to step #7)
5. On your enrolled mobile, click on the

received notification
Confirm that the security code (ex: [QM-

VF]) is matching the one displayed on
the webpage
6. Validate the request by typing your

password
If biometry is enabled, click on the

fingerprint icon to validate the notification
with your fingerprint.
The validation of the

authentication request is
automatically sent to your
browser and the application
is accessed
Offline mode
7. If on the authentication screen you have

selected “Enter code”, then perform the
following:
Launch the Memority application
installed on your mobile that is enrolled
in Digital P@ss
8. To generate an OTP, click on the icon
on the top right corner of the app
9. Fill in your password or use your

fingerprint if applicable to generate the
OTP
Use this OTP to authenticate using
Digital Pass to the desired application on
your browser
WARNING: Please note that if your

smartphone isn’t connected to Internet and
you enter a wrong password, a code will still
be generated. However, this code will not
allow you to access to your application
10. Enter the OTP code you got in the

previous step and click on “Log in”.
You have access to the

desired application
4. DIGITAL P@SS VIA BROWSER
4.1. INTRODUCTION
The purpose of enrolling a browser in Digital P@ss is to make it known to Digital P@ss as
yours, then you can use it as proof of your identity when you want to access Total web
applications from this browser even if you are not using any of the following PCs which support
transparent authentication: VISION, Trading & Shipping (TS), or Total Gas & Power (TGP)
If you have not yet activated your OTP, please refer to section 3.3 of this guide
The following browsers are supported in Digital P@ss:

- Internet Explorer 11
- Chrome (last version)
- Firefox (last version)
Warning:
- You can enroll up to 5 browsers.
- A secured authentication means installed on a web browser is linked to the “Browser-OS”
couple
Ex: Enrolling Google Chrome on two Windows OS means enrolling two different browsers.
- You are advised to check the supported devices by the targeted application / VPN portal you
would like to access via Digital P@ss.
Depending on the browser you would like to use, the following chapters explain how to enroll
and use each type of browser:
To enroll and use Chrome as a secured authentication means, click here.
To enroll and use Firefox as a secured authentication means, click here.
To enroll and use Internet Explorer as a secured authentication means, click here.
4.2. ENROLL AND USE A BROWSER AS A SECURED AUTHENTICATION MEANS
4.2.1. Chrome
4.2.1.1. Prerequisites
1. On chrome, in Settings > Advanced

Settings, under “Privacy and security >
Content settings > Cookies”, the
parameter « Allow sites to save and read
cookie data » should be checked and the
parameter «Block third-party cookies and
site data» must be unchecked.
These parameters are by default already
set that way.
2. Click on “Add” on “Allow” section and add

these websites :
- https://ult-inwebo.com
- https://www.myinwebo.com
4.2.1.2. Enrollment
1. Copy/paste the link displayed in the

P@ss no-reply-
2. This page will be displayed.

Type your IGG
3. Select Browser
4. If you have already enrolled a browser or a

mobile in Digital P@ss, type the password
you have set at that moment.
If you haven’t already enrolled a browser

in Digital P@ss, then set a new password
of 7 to 16 alphanumeric characters with at
least one digit and one letter.
You will be requested to enter this
password each time you use your Mobile
or an enrolled browser.
You can also customize the browser name
to identify it easily in your Digital P@ss
profile.
Once done, click “Activate”.
5. Once the enrollment is completed, you will

obtain the following message to confirm
that your browser is now a trusted device
and is ready to be used as a secured
To make sure the enrollment persists, a
plugin needs to be downloaded. Click on
the link “Click here” to be redirected to the
installation of inWebo Helium Backup.
Otherwise, enter this link in the address
bar of the Chrome browser you’re
enrolling:
https://chrome.google.com/webstore/detail
/ekjhggmngmlemlalphejlafdmldloanb
6. Click on “Add to Chrome”.
You have now successfully enrolled your

Chrome browser.
4.2.1.3. Use Chrome as a secured authentication means

screen.

authenticate using your trusted browser.
on this browser)


means installed on both a browser and a
In this case, select Browser.
4. If you have enrolled only your browser,

Enter your password and click on

Connect.
The application is automatically

accessed.
4.2.2. Firefox
1. On Firefox, enter “about:config” in the

address bar, search and verify
“dom.storage.enabled” is « true ».
2. Firefox needs to be configured to

authorize Third Party Cookies :
Go to Options > Privacy
History must be set to “Remember
history”.
*If using custom settings, “Accept third-
party cookies” must be set to “Always”
3. Configure exceptions in Options > Privacy

and add these websites :
- https://ult-inwebo.com
- https://www.myinwebo.com
4.2.2.2. Enrollment

P@ss no-reply-

Type your IGG
3. Select “Browser”
4. If you have already enrolled a browser or a

mobile in Digital P@ss, type the password
you have set at that moment.

in Digital P@ss, then set a new password
of 7 to 16 alphanumeric characters with at
least one digit and one letter.
You can also customize the browser name
to identify it easily in your Digital P@ss
profile.
5. Once the enrollment is completed, you will

obtain the following message to confirm
that your browser is now a trusted device
and is ready to be used as a secured
the link “Click here” to be redirected to the
installation of inWebo Helium Backup.
bar of the Firefox browser you’re enrolling:
https://addons.mozilla.org/en/firefox/addon
/helium-backup/
6. Click on “Add to Firefox”

Firefox browser
4.2.2.3. Use Firefox as a secured authentication means

screen.

on this browser)




“Connect”.

accessed.
4.2.3. Internet Explorer
1. On Internet Explorer in Settings > Internet

Options > Advanced, the following
parameters must be set :
- Security -> «Enable Dom storage» is
checked,
- Security -> «Enable native XMLHTTP
support » is checked,
- Browsing -> «Enable third-party browser
extensions » is checked.
2. In Internet Settings > Internet Options >

Security, Before starting the enrollment
process, check and configure if necessary
the browser security zone parameters.
The 4 following sites must all be in the
same security zone :
-https://ult-inwebo.com
-https://www.myinwebo.com
-https://digitalpassport.hubtotal.net
-https://sso-digitalpassport.hubtotal.net
-https://certauth-
digitalpassport.hubtotal.net
Check the contents of the different
security zones :
-If one of the above sites is listed, the
others must be added in the same security
zone
-If not, no action is required. It means they
are in the Internet security zone.
The level of security in the zone
containing these sites must not be set to
High
If you do not have the rights to change the
internet settings, please contact your IT
support.
4.2.3.2. Enrollment

P@ss no-reply-

Type your IGG
3. Select “Browser”
4. If you have already enrolled a browser or

a mobile in Digital P@ss, type the
password you have set at that moment.

in Digital P@ss, then set a new
password of 7 to 16 alphanumeric
characters with at least one digit and one
letter.
You can also customize the browser
name to identify it easily in your Digital
P@ss profile.
5. Once the enrollment is completed, you

will obtain the following message to
confirm that your browser is now a
trusted device and is ready to be used
as a secured authentication means.
the link “Click here” to be redirected to
the installation of inWebo Helium
Backup.
bar of the Internet Explorer browser
you’re enrolling
https://www.myinwebo.com/hbckup/insta
ll
Note: You will need admin rights in order
to perform the installation of the plugin
6. After several seconds, a security window

will appear, click on « Yes ». A new
installation window will then be opened,
click on Next > Install > Finish

Internet Explorer browser
4.2.3.3. Use Internet Explorer as a secured authentication means

screen.

on this browser)




Connect.

accessed.
For any problems or questions, contact your usual IT support

Digital P@ss Guide

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Digital P@ss Guide

Uploaded by

Copyright:

Available Formats

Version Date Author Update

1.0 01/03/2018 TGS/TGITS/EUS/UIS/MOB Document creation

Digital P@ss can be used in two modes:

To use the Mobile for authentication, you must have:

A smartphone or tablet Android (4.4 or later) or iOS (9.0 or later)

An account into the targeted application

1. Launch the Digital Pass portal:

2. Click on “My authentication means”

3. Click on “Create OTP Account”

4. Confirm/modify the contact email

5. As soon as you receive the enrollment

3.3.2. For external users/partners

1. To activate your first enrolled device,

2. As soon as you receive the enrollment

3.4. ENROLL A MOBILE

1. Click on the link displayed in the

2. Type your IGG

4. You will be redirected to the following

5. Based on the type of smartphone you

6. Once installed, launch the application,

7. Accept the terms and conditions

9. Set a new password of 7 to 16

WARNING! This password will be

WARNING! If in the future you would like

11. Your Smartphone is now enrolled in

1. Authenticate to an application via

If you’re not using Vision, Total Trading

2. You will be requested to identify yourself.

3. If you have a secured authentication

4. If you have enrolled only your mobile,

A message will be displayed to confirm

5. On your enrolled mobile, click on the

Confirm that the security code (ex: [QM-

6. Validate the request by typing your

If biometry is enabled, click on the

The validation of the

7. If on the authentication screen you have

8. To generate an OTP, click on the icon

on the top right corner of the app

9. Fill in your password or use your

WARNING: Please note that if your

10. Enter the OTP code you got in the

You have access to the

The following browsers are supported in Digital P@ss:

To enroll and use Chrome as a secured authentication means, click here.

To enroll and use Firefox as a secured authentication means, click here.

1. On chrome, in Settings > Advanced

2. Click on “Add” on “Allow” section and add

1. Copy/paste the link displayed in the

2. This page will be displayed.

4. If you have already enrolled a browser or a

If you haven’t already enrolled a browser

5. Once the enrollment is completed, you will

6. Click on “Add to Chrome”.

You have now successfully enrolled your

4.2.1.3. Use Chrome as a secured authentication means

1. Authenticate to an application via

If you’re not using Vision, Total Trading

2. You will be requested to identify yourself.

3. If you have a secured authentication

4. If you have enrolled only your browser,

Enter your password and click on