Applying for access to Pims using the correct user account
Aker BPs suite of Pims applications contains loads of data from many parties and it is important that Aker BP have control to insight to all this data. To secure that people only see what they are supposed to see in the system multiple security layers are applied to the individual Pims applications/modules. Details about what security layers apply to the individual Pims modules can be found in the Pims Governing document
Pims Access Controls and Domain Requirements for Projects (32-001459)
.
The most important part to secure insight to data is to segregate between Aker BP employees, external users in Aker BP fixed positions (=users on the Aker BP employees list) and other external users in the system.
This is why it is very important that all external users not listed on Aker BPs Employees list (= users not logging hours in Aker BP Fieldglass) request access to Pims resources using their home company email/Azure account.
This is also clearly stated in the
Pims Access Request form
and multiple security checks have been added to the access request process to verify that users apply for access with the correct account. External users that have been provided with an @akerbp.com account for other purposes should, as a general rule, not use this account in Pims. The access request process will pick up on incorrect requests and send these for account review to Aker BP Pims Coordinator that will check and verify if request is legit or should be voided.
The Access Approval process
Each work area in Pims (called domains) have been set up with Pims modules required for the specific domain/project phase.
Domain owners nominates access approvers per Pims module in the domain and the nominated access approvers will receive individual email for each access request they are set to handle. This means that an access request form containing access requests for multiple Pims modules in a domain will involve multiple access approvers. As a consequence different modules may be granted access to at different times - some access approvers may respond faster than others. If you need to "chase" an access request you can find a list of all access approvers for all module in all domains
here.
The Access Request process
All access requests, for both internal and external users, are done via the
Pims Access Request form
where users specify what access they require. It is also possible to request access on behalf of others using this web site (see details in picture below).
When the access request has been submitted the access approver(s) will get an email with a link to the request for quick and easy review/handling/approval of the request. Super users of each Pims module may be required to fully add users to specific roles etc if required.
All changes made to Aker BPs Pims application suite are being logged and documented in the "Aker BP Pims Change Log" and flagged next to the application or feature the change is related to as shown in the picture below:
If you have issues related to MFA/2-factor authentication, please contact Aker BP IT Support:
Phone: +47 21 70 78 20
E-mail: ithjelp@akerbp.com
Aker BP user accounts are all protected with MFA (Multi Factor Authentication). All external loginsusing Aker BP accounts, including guest user accounts, require login with username and password AND a second step verification via SMS code or using the “Microsoft Authenticator" application. The Authenticator app can be used where SMS / telephone coverage is not available.
New users will be asked for additional security verification during login.
PS! Aker BP machines in Aker BP locations do not require Multi Factor Authentication !
Changing the phone number used for SMS authentication
How to set up MFA to use the Microsoft Authenticator app for authentication (or change the default MFA authentication method)
(This is required if working from sites where a mobile phone network is not available)
Microsoft Authenticator - Securing your account with MFA / Troubleshooting MFA
(Based on Aker BP Knowledge Base KB0012970)
People with an Aker BP guest user account are actually authenticating with their home company when they log in to Aker BP resources like https://pims.akerbp.com.
For external users working from a home company machines login to Aker BP resources works seamlessly by selecting "Login with Office 365" whenever asked.
For external users with an Aker BP guest user account working from other machines, e.g., an Aker BP machine, users will have to open the web browser in incognito mode/In-Private mode/guest mode (depending on what web browser is being used) to log into Pims. This is required to separate between the local authentication and the Office 365 account to be used to log in to Aker BP Pims.
1. Start web browser in Incognito/In-Private/guest mode (right click browser icon and select the option available)
2. Go to https://pims.akerbp.com
3. Select "Login with Office 365"
4. Log in using the account that has been registered as a guest account with Aker BP, typically your originating company login/email.
The password to be used is your originating company email/login password.
Tip - How to create a Google Chrome shortcut to open https://pims.akerbp.com in Guest/incognito mode
The error " Something went wrong" when trying to log into Pims One using "Login with Office 365" is often related to a local client issue.
See if it works from another machine and maybe try another Internet browser (Chrome/Edge/Firefox/Safari).
A workaround can also be to log in to Pims via a Terminal Server/Citrix solution.
This error occurs if your account is locked in the Aker BP Azure AD.
Send an email to ithjelp@akerbp.com and ask them to enable the account. Make sure to add your primary Aker BP contact/manager on CC.
This error is most likely related to the account status in Aker BP Azure AD or related to the users home company's Azure AD settings and can only be fixed by contacting (ithjelp@akerbp.com ) or, if all OK in Aker BP, IT support of users home company as
explained in this Microsoft article.
Aker BP IT Support / Pims Support can NOT assist in resolving this.
Experiencing Slow Performance in Pims?
Thousands of users have access to the Aker BP Pims applications, some using light-wight applications like
Pims Meetings & Actions while other users are most involved in Pims Document Control (DCS), Completion (CMS) and other applications with large amount of data. From time to time users experience slow performance when using Pims and it can sometimes be hard to pin-point what is the root cause of these "hangs".
To help us troubleshoot and improve Pims we ask you to report all hangs/timeouts and slow performance using
the Pims Support application: Pims Issue Tracker
Give a brief description of what you selected/tried to do / how to reproduce. Please make sure to attach screenshots of any messages/errors you receive and add the url/link to the active Pims window where you experience issues/slow performance. Screenshots should contain the whole browser window and not just the part that is slow.
