Access Requirements: In order to access the Lockheed Martin Procure-to-Pay (LMP2P) application, you must have an Exostar’s Managed Access Gateway (MAG) account, as well as a Mobile ID One Time Password (OTP) with Proofing credential. Identity Proofing refers to the process by which Exostar verifies the legitimacy of users’ digital identities.
Step 1. Complete TPM Registration
Exostar will send an email titled: Invitation to join the Exostar Trading Partner Manager (TPM) and Lockheed Martin’s Procure to Pay system. While completing the Trading Partner Manager (TPM) registration process, you are prompted to register your organization in MAG. The process differs slightly for companies with an existing MAG account. If you already have an account, you are prompted to purchase your credential before completing your TPM Profile.
To complete TPM registration:
1. Locate the email and click the link provided.
2. Input the Invitation Reference Code and the Invitation Confirmation Code.
NOTE: Both codes are provided in the invitation email.
3. Select the checkbox next to I’m not a robot. Click Resume to continue.
4. Review the information presented on the screen. Click Continue with Registration.
NOTE: If you are an existing MAG user, you are prompted to input your login information and authenticate with an approved two-factor credential.
5. Review the note to Lockheed Martin Suppliers. Click Continue.
6. Navigate through the registration form via the buttons provided and complete all required fields.
NOTES: Required fields are denoted with a red asterisk. Click Save and Resume Later under the Action menu, if you wish to complete at a later time and not lose any progress. For detailed instructions on each section of the registration form, please review the TPM Invitation Acceptance Guide, as well as the TPM Registration Checklist.
7. Once you complete all required sections, select the Accept and Continue option from the Actions menu.
8. Review the certification information and click the I Agree button.
9. Input user information for the designated Organization Administrators, Company Contact, and Application Administrators. Click Next.
10. Review the MAG Service Agreement. Click I Agree.
11. Review the TPM Service Agreement. Click I Agree.
A screen displays confirming registration submission. Once your request is approved, you receive an email confirmation with next steps.
When completing the TPM registration profile, please review the Cyber Security section carefully to determine if your organization must complete the CCRA questionnaire. If you answer (1) on the DFARS applicability section or Yes to the handling Sensitive Information question, the CCRA form is automatically assigned to you. Please review the TPM Registration Checklist for additional information as well as the TPM OBM Guide for detailed instructions on how to access and complete the CCRA.
2. Input the Invitation Reference Code and the Invitation Confirmation Code.
NOTE: Both codes are provided in the invitation email.
3. Select the checkbox next to I’m not a robot. Click Resume to continue.
4. Review the information presented on the screen. Click Continue with Registration.
NOTE: If you are an existing MAG user, you are prompted to input your login information and authenticate with an approved two-factor credential.
5. Review the note to Lockheed Martin Suppliers. Click Continue.
6. Navigate through the registration form via the buttons provided and complete all required fields.
NOTES: Required fields are denoted with a red asterisk. Click Save and Resume Later under the Action menu, if you wish to complete at a later time and not lose any progress. For detailed instructions on each section of the registration form, please review the TPM Invitation Acceptance Guide, as well as the TPM Registration Checklist.
7. Once you complete all required sections, select the Accept and Continue option from the Actions menu.
8. Review the certification information and click the I Agree button.
9. Input user information for the designated Organization Administrators, Company Contact, and Application Administrators. Click Next.
10. Review the MAG Service Agreement. Click I Agree.
11. Review the TPM Service Agreement. Click I Agree.
A screen displays confirming registration submission. Once your request is approved, you receive an email confirmation with next steps.
When completing the TPM registration profile, please review the Cyber Security section carefully to determine if your organization must complete the CCRA questionnaire. If you answer (1) on the DFARS applicability section or Yes to the handling Sensitive Information question, the CCRA form is automatically assigned to you. Please review the TPM Registration Checklist for additional information as well as the TPM OBM Guide for detailed instructions on how to access and complete the CCRA.
Step 2. Activate User Account
Once Exostar approves your organization registration, you receive an account activation email. Please review all information provided in the email, paying special attention to your Account Details and User ID.
IMPORTANT: Since you received and accepted the invitation, you are automatically designated as the Organization Administrator for your company. For more information on your administrative responsibilities, please see the MAG Organization Administrator page.
Exostar offers a quarterly MAG Administration Webinar that provides information and instructions on administrative responsibilities. Please see the MAG Webinars page for available dates and registration information.
To activate your user account:
1. You will receive an email invitation from Exostar Administrators that includes your Organization Name, Organization ID and User ID. Click the Activate My Account button in the email to open your preferred web browser.
2. Click the Let’s Get Started button.
NOTE: The security questions option is no longer applicable or required.
3. Enter and re-enter a Password meeting the criteria listed on the screen. Click Next.
4. A confirmation message will display Your account is now active. Click Continue to open the MAG Dashboard.
If you are not an Organization Administrator, please skip Step 3. Accept Terms and Conditions and move on to Step 4. Purchase Phone OTP without Proofing Credential.
2. Click the Let’s Get Started button.
NOTE: The security questions option is no longer applicable or required.
3. Enter and re-enter a Password meeting the criteria listed on the screen. Click Next.
4. A confirmation message will display Your account is now active. Click Continue to open the MAG Dashboard.
If you are not an Organization Administrator, please skip Step 3. Accept Terms and Conditions and move on to Step 4. Purchase Phone OTP without Proofing Credential.
Step 3. Agree to Terms and Conditions
Once you successfully activate your MAG account, you must accept ALL MAG-related terms, as well as the Lockheed Martin Procure-to-Pay (LMP2P) Terms and Conditions. To accept the Lockheed Martin Procure-to-Pay (LMP2P) Terms and Conditions, you must have the Organization Administrator or LMP2P Application Administrator role. Access to LMP2P is not possible for any users in your organization until Terms and Conditions are accepted.
To accept MAG and LMP2P Terms and Conditions:
1. Once you activate your account and login for the first time, you are prompted to review ALL MAG-related terms. Once reviewed, click Agree and Continue.
2. Locate the LMP2P tile under My Applications on the MAG Dashboard. Click the Agree to Terms button.
3. Review the Terms of Service documents. Check the box for I’ve read and agree to this terms and conditions. Click the Accept and Continue button to accept terms and conditions and navigate back to the dashboard.
2. Locate the LMP2P tile under My Applications on the MAG Dashboard. Click the Agree to Terms button.
3. Review the Terms of Service documents. Check the box for I’ve read and agree to this terms and conditions. Click the Accept and Continue button to accept terms and conditions and navigate back to the dashboard.
Step 4. Purchase Mobile ID
To access LMP2P, you must purchase a Mobile ID One Time Password (OTP) with Proofing credential from Exostar’s Web Store.
Other Acceptable Credentials:
- Hardware OTP Token with Proofing
- FIS MLOA Hardware Certificates
- FIDO2 Passkey
To purchase the Mobile ID credential:
1. Login to your MAG account your Email Address or User ID and Password.
2. Click the Get 2FA button from the My 2FA Credentials section on the MAG Dashboard.
3. Select Lockheed Martin from the Partner drop-down menu to display a list of acceptable credentials.
4. Select the radio button for the Mobile ID One Time Password (OTP) With Proofing – (1 Year) option. Click Next.
5. Review and input any missing information in the Primary Information, Billing Address, and Shipping Address sections. Click Next.
6. Select your Payment Method (credit or invoice). Input payment details, if paying by credit. Click Submit.
A confirmation screen displays and you receive a confirmation email, containing the license key required for the activation process. You can activate directly from the confirmation screen, or later via your MAG user account and the My 2FA Credentials section.
2. Click the Get 2FA button from the My 2FA Credentials section on the MAG Dashboard.
3. Select Lockheed Martin from the Partner drop-down menu to display a list of acceptable credentials.
4. Select the radio button for the Mobile ID One Time Password (OTP) With Proofing – (1 Year) option. Click Next.
5. Review and input any missing information in the Primary Information, Billing Address, and Shipping Address sections. Click Next.
6. Select your Payment Method (credit or invoice). Input payment details, if paying by credit. Click Submit.
A confirmation screen displays and you receive a confirmation email, containing the license key required for the activation process. You can activate directly from the confirmation screen, or later via your MAG user account and the My 2FA Credentials section.
Step 5. Complete Proofing
You must activate your Mobile ID token using the license key received via email or at the end of the purchase process. After entering the license key, you will be prompted to select your identity proofing option:
- Self-Service Mobile Proofing: If you are located in the United States, you can complete the self-service proofing process using your smartphone’s camera by providing your Social Security Number (SSN), driver’s license or passport.
- Live Video Proofing: Users located outside of United States must schedule a live proofing session. US-based users may select live video proofing if they are unable to complete the Experian proofing. Please review the Identity Proofing Resource page for additional information prior to your proofing appointment.
To activate your credential and complete the SELF-SERVICE MOBILE PROOFING:
1. In the My 2FA Credentials section on the MAG Dashboard, click the Enter it here link, under Have a License Key?
2. Enter the license key you received via email in the field provided. Click Next.
3. Select the desired proofing country. Click Next.
NOTE: Experian Self-service proofing is only available in the US. You will need a passport or a driver’s license to complete the process successfully.
4. On the Select identity proofing method screen, click the PROCEED WITH MOBILE PHONE button.
5. Confirm your Full Name. Click Next.
6. Review the proofing instructions. Click the START PROOFING button.
7. Review the Self-Service Proofing Terms and Conditions. Click the AGREE AND CONTINUE button.
8. Review and complete all required fields, including all nine digits of your Social Security Number, to verify your identity. Click Next.
NOTE: If your name is listed incorrectly, click the MY NAME IS INCORRECT button.
9. Review all mobile number-related information. Enter your Mobile Number. Click Next.
NOTE: If further evidence is needed, you are prompted to answer Knowledge-Based Authentication (KBA) Questions. Once you complete the questions, click Next.
10. A confirmation displays notifying you a link has been sent to your mobile phone and you have THIRY MINUTES TO COMPLETE PROOFING. Open the link on your mobile phone.
11. Click the Let’s get started button on your mobile phone to open the Select a document screen.
12. Select US / Canada DL and ID, International ID Cards, or Passport Booklet.
13. Review the information on the photo screen. Click the Capture photo button.
NOTE: Your phone’s browser may ask for use of your camera. Click Allow.
14. Follow camera prompts to capture required photos of your ID.
NOTE: You must capture front and back. Follow the prompts.
15. Once complete, click Looks good. Continue.
16. Review the Take a selfie screen. Click Take Selfie.
17. Capture a photo of yourself. This is required. Click Looks good. Finish application.
18. Once you successfully complete your instant proofing on your mobile phone, return to the proofing application.
19. Click on the ID PROOFING COMPLETED button in the proofing application.
IMPORTANT: Once you successfully complete your proofing, you must register your credential. Please see the steps outlined in the Step 6. Register Credential section below.
2. Enter the license key you received via email in the field provided. Click Next.
3. Select the desired proofing country. Click Next.
NOTE: Experian Self-service proofing is only available in the US. You will need a passport or a driver’s license to complete the process successfully.
4. On the Select identity proofing method screen, click the PROCEED WITH MOBILE PHONE button.
5. Confirm your Full Name. Click Next.
6. Review the proofing instructions. Click the START PROOFING button.
7. Review the Self-Service Proofing Terms and Conditions. Click the AGREE AND CONTINUE button.
8. Review and complete all required fields, including all nine digits of your Social Security Number, to verify your identity. Click Next.
NOTE: If your name is listed incorrectly, click the MY NAME IS INCORRECT button.
9. Review all mobile number-related information. Enter your Mobile Number. Click Next.
NOTE: If further evidence is needed, you are prompted to answer Knowledge-Based Authentication (KBA) Questions. Once you complete the questions, click Next.
10. A confirmation displays notifying you a link has been sent to your mobile phone and you have THIRY MINUTES TO COMPLETE PROOFING. Open the link on your mobile phone.
11. Click the Let’s get started button on your mobile phone to open the Select a document screen.
12. Select US / Canada DL and ID, International ID Cards, or Passport Booklet.
13. Review the information on the photo screen. Click the Capture photo button.
NOTE: Your phone’s browser may ask for use of your camera. Click Allow.
14. Follow camera prompts to capture required photos of your ID.
NOTE: You must capture front and back. Follow the prompts.
15. Once complete, click Looks good. Continue.
16. Review the Take a selfie screen. Click Take Selfie.
17. Capture a photo of yourself. This is required. Click Looks good. Finish application.
18. Once you successfully complete your instant proofing on your mobile phone, return to the proofing application.
19. Click on the ID PROOFING COMPLETED button in the proofing application.
IMPORTANT: Once you successfully complete your proofing, you must register your credential. Please see the steps outlined in the Step 6. Register Credential section below.
To activate your credential and complete the LIVE VIDEO PROOFING:
1. In the My 2FA Credentials section on the MAG Dashboard, click the Enter it here link, under Have a License Key?
2. Enter the license key you received via email in the field provided. Click Next.
3. Select desired proofing country. Click Next.
4. In the Verify my identity by meeting with an agent later section, click the Schedule Appointment button.
5. Confirm your full name. Click Next.
6. Review process outline. Click Start Proofing button.
7. Review the Service Agreement. Click Agree and Continue.
8. Select the Appointment Language (English). Click Continue.
9. Review proofing information. Click Continue to schedule your proofing appointment.
10. Select an appointment date and time from the calendar. Click Continue.
11. Enter required fields. Click Confirm.
NOTE: You will receive a confirmation email. Shortly before your proofing interview, you receive a Microsoft Teams invite via email. On your scheduled appointment date, an Exostar Proofing Agent will contact you.
12. Launch Microsoft Teams via the link provided in the email invitation.
NOTE: There is limited time to complete troubleshooting during your appointment. Failure to appear for your scheduled appointment will require you to reschedule via your MAG account.
13. You must present approved identity documents and answer a series of yes or no questions to an Exostar Proofing Agent.
After a successful proofing, the agent provides an activation code, which is required to complete the credentialing process. Once your proofing is complete, the code cannot be retrieved by anyone, including Exostar Customer Support. The activation code expires 30 days from the issue date. If your activation code is lost or expired, it may result in additional cost to you or your company to repeat the identity verification process. If you fail the webcam proofing, the proofing agent provides further instructions.
2. Enter the license key you received via email in the field provided. Click Next.
3. Select desired proofing country. Click Next.
4. In the Verify my identity by meeting with an agent later section, click the Schedule Appointment button.
5. Confirm your full name. Click Next.
6. Review process outline. Click Start Proofing button.
7. Review the Service Agreement. Click Agree and Continue.
8. Select the Appointment Language (English). Click Continue.
9. Review proofing information. Click Continue to schedule your proofing appointment.
10. Select an appointment date and time from the calendar. Click Continue.
11. Enter required fields. Click Confirm.
NOTE: You will receive a confirmation email. Shortly before your proofing interview, you receive a Microsoft Teams invite via email. On your scheduled appointment date, an Exostar Proofing Agent will contact you.
12. Launch Microsoft Teams via the link provided in the email invitation.
NOTE: There is limited time to complete troubleshooting during your appointment. Failure to appear for your scheduled appointment will require you to reschedule via your MAG account.
13. You must present approved identity documents and answer a series of yes or no questions to an Exostar Proofing Agent.
After a successful proofing, the agent provides an activation code, which is required to complete the credentialing process. Once your proofing is complete, the code cannot be retrieved by anyone, including Exostar Customer Support. The activation code expires 30 days from the issue date. If your activation code is lost or expired, it may result in additional cost to you or your company to repeat the identity verification process. If you fail the webcam proofing, the proofing agent provides further instructions.
Step 6. Activate & Register Credential
Before you activate and register your credential, find the Authy™ app in your mobile app store and install it on your smartphone. Make sure your phone is on and has a network connection. Tablets are supported as additional devices, HOWEVER, you MUST register a cellular smartphone capable of receiving SMS messages or voice calls FIRST.
To complete credential activation and registration:
1. Log into your MAG account.
2. Navigate to the My Account tab and Manage OTP sub-tab.
3. In the Introduction section, select the click here link next to Register. to redirect to the activation screens.
4. Fill out the required fields. Click Next and Activate.
5. Enter the phone number (for the smartphone where Authy is installed). Click Register.
6. On your smartphone, you will receive a message: Your account was added. Tap to get the code. Obtain your MAG Token ID, and enter it in the Token field in MAG. Click Verify to complete the process.
IMPORTANT! You can log in in two different ways. After you access MAG via user ID/email address and password, if during the OTP login you select to authenticate through a push notification, you will receive the message Approve to authenticate: select Approve. If you select to authenticate through a soft OTP, enter the OTP from Authy in the Soft OTP field in MAG.
2. Navigate to the My Account tab and Manage OTP sub-tab.
3. In the Introduction section, select the click here link next to Register. to redirect to the activation screens.
4. Fill out the required fields. Click Next and Activate.
5. Enter the phone number (for the smartphone where Authy is installed). Click Register.
6. On your smartphone, you will receive a message: Your account was added. Tap to get the code. Obtain your MAG Token ID, and enter it in the Token field in MAG. Click Verify to complete the process.
IMPORTANT! You can log in in two different ways. After you access MAG via user ID/email address and password, if during the OTP login you select to authenticate through a push notification, you will receive the message Approve to authenticate: select Approve. If you select to authenticate through a soft OTP, enter the OTP from Authy in the Soft OTP field in MAG.
Step 7. Access LMP2P
Please note, as an Organization Administrator, you must first give yourself the Application Administrator role to approve your own access. Once you approve your access request, you can then access the application. Please be advised only users with the Organization Administrator role can make these changes. Once you successfully complete account and credential set-up, you can access the LMP2P application.
To make yourself an Application Administrator:
1. Login to your MAG account. Navigate to the My Account tab and the Administration sub-tab.
2. Click on View Users. Search for yourself, and click the User ID link next to your name.
3. Scroll down to the Application Settings section. Make sure the App Admin checkbox is checked.
NOTE: If you uncheck the box next to Org Admin and submit the change, you will lose Organization Administrator privileges. If you lose these privileges, you must have a different Organization Administrator reestablish your role, or contact Exostar Customer Support for assistance.
4. To the right of App Admin, click the gray Update button to open a new window In the window, place a check in the box for the application(s) (Lockheed Martin Procure to Pay and Lockheed Martin eInvoicing) you would like to be an administrator for and click Done at the bottom to close the window.
5. Scroll to the bottom of the profile. Click Submit.
6. From your MAG Dashboard, select the Requests tab to display a new page with any requests for new users or application access.
7. To approve your request, hover your mouse over the Application/User Requests field. Select the drop-down Authorize Applications.
8. Place a check in the box next to your request. Select Approve.
9. Follow one of the options below depending on which application you are approving and click Next:
– Lockheed Martin Procure To Pay: Select the Supplier Vendor Admin role.
– Lockheed Martin eInvoicing: Select Full Access
You will see a message stating the approval is complete. Please note it can take several minutes (up to a few hours) for an application to become Active once you have completed authorization steps.
2. Click on View Users. Search for yourself, and click the User ID link next to your name.
3. Scroll down to the Application Settings section. Make sure the App Admin checkbox is checked.
NOTE: If you uncheck the box next to Org Admin and submit the change, you will lose Organization Administrator privileges. If you lose these privileges, you must have a different Organization Administrator reestablish your role, or contact Exostar Customer Support for assistance.
4. To the right of App Admin, click the gray Update button to open a new window In the window, place a check in the box for the application(s) (Lockheed Martin Procure to Pay and Lockheed Martin eInvoicing) you would like to be an administrator for and click Done at the bottom to close the window.
5. Scroll to the bottom of the profile. Click Submit.
6. From your MAG Dashboard, select the Requests tab to display a new page with any requests for new users or application access.
7. To approve your request, hover your mouse over the Application/User Requests field. Select the drop-down Authorize Applications.
8. Place a check in the box next to your request. Select Approve.
9. Follow one of the options below depending on which application you are approving and click Next:
– Lockheed Martin Procure To Pay: Select the Supplier Vendor Admin role.
– Lockheed Martin eInvoicing: Select Full Access
You will see a message stating the approval is complete. Please note it can take several minutes (up to a few hours) for an application to become Active once you have completed authorization steps.
To access the LMP2P application:
1. Login to your MAG user account with Email Address or User ID and Password.
2. Locate the Lockheed Martin Procure-to-Pay (LMP2P) tile, located in the My Applications section of the MAG Dashboard. Click Launch.
3. If during the OTP login you select to authenticate through a push notification, you will receive the message Approve to authenticate: select Approve.
4. If you select to authenticate through a soft OTP, enter the OTP from Authy in the Soft OTP field in MAG.
2. Locate the Lockheed Martin Procure-to-Pay (LMP2P) tile, located in the My Applications section of the MAG Dashboard. Click Launch.
3. If during the OTP login you select to authenticate through a push notification, you will receive the message Approve to authenticate: select Approve.
4. If you select to authenticate through a soft OTP, enter the OTP from Authy in the Soft OTP field in MAG.
Existing Users
For existing MAG users with valid OTP credentials, please see the following additional resources:
- OTP Renewal: This page provides information and instructions on the OTP renewal process.
- OTP Training Resources: This page provides downloadable user guides and OTP Frequently Asked Questions (FAQs).
System Requirements
| Edge | Firefox | Safari | Chrome | |
|---|---|---|---|---|
| Windows 7 SP1 | N/A | S | N/A | T |
| Windows 8.1 | N/A | S | N/A | T |
| Windows 10 | S | S | N/A | T |
| MAC OS X (up to version 10.12 “Sierra”) | N/A | T | T | T |
| (S) Supported | This combination of operating system and browser is supported but has not been fully tested. |
| (T) Tested | This combination of operating system and browser is fully supported and has been tested. |
| (N/A) Not Applicable | This combination is not applicable (non-compatible). |
| Component | Recommendation | Comments |
|---|---|---|
| Memory | 512 MB or higher memory is recommended for best performance. Proper system memory allows for efficient operation of the applications. | Exostar’s services are primarily browser driven. System performance improvements from additional RAM will be evident to the extent overall system improvements are realized |
| CPU Speed | 1 GHz or better CPU speed is recommended for best performance. | The more powerful (faster) CPU speed will allow for more efficient operation of the applications. |
| Internet Connectivity | 2Mb/sec or better | A lower connection speed will result in slower performance or possible system time outs due to extended run times. |
| Adobe | Version 9 | Exostar utilizes Adobe Reader for downloading training and other support materials. |
| Java | JRE Version 8 or higher | The most current version of JRE is recommended. Earlier versions may be incompatible when uploading and downloading encrypted documents. |