IDHUB: Retarus Identity & Access Management solution (IAM)

IDHUB is Retarus’ new Identity and Access Management (IAM) solution.
It is available to all non-SSO customers when accessing the EAS and myEAS portals.

IDHUB is being introduced in two phases:

• Phase 1 – Identity (Login): Currently in production.

• Phase 2 – Access Management: Coming soon. This will allow administrators to manage users, profiles, and authorizations more efficiently.

After IDHUB rollout, when you access EAS and myEAS, you will end in the IDHUB system for a normal login with your current credentials, username (email) and password.

After your first login, you will access the normal homepage.

In myEAS homepage each user will see a new alert banner suggesting a Two-Factor Authentication (2FA) set up to be done in the new IDHUB user console that will open in a new tab.

For more information see also:
Frequently Asked Questions

Key Security Features in IDHUB

The new IDHUB introduces enhanced security features to protect your account and data:

• Secure Login: Log in with a unique username and password, including strict password policies.

• Two-Factor Authentication (2FA) (to be set up by each user): every login requires an extra verification step for stronger protection.

• Brute-Force Protection: The system blocks suspicious or repeated failed login attempts. When this is detected, your accounts will be temporarily locked to protect your data.

• Monitoring & Alerts: Login activity is monitored continuously. Suspicious behavior automatically triggers protective actions.

• Session Security: Idle sessions expire automatically to prevent unauthorized access.

Accessing IDHUB from myEAS

IDHUB can be accessed from the myEAS portal under Account & Security, located in the user dropdown menu (top right) or in the security alert banner.

Account & Security redirects users to a new browser window, opening their personal IDHUB console.

• Personal Info:
  Users can edit their First Name and Last Name.
  Please note: these changes made in IDHUB will not be synchronized with the classic EAS portal user settings (EAS user settings will be replaced during IDHUB’s next phase of implementation).

Since the new login is now centralized and managed by IDHUB, logging out from IDHUB will log you out of all active EAS and myEAS sessions.

• Account security:

You can update your password and set up Two-Factor Authentications using different Authentication applications. IDHUB supports Google Authenticator, Microsoft Authenticator, and FreeOTP applications, in their available mobile and desktop browsers versions.

A second configuration - another two-factor authentication - can be set up to work as a backup configuration. This will mitigate the problem of losing access to one device of your configurable devices.

How to Set Up a Two-Factor Authentication

When selecting Set Up Authenticator Application, users will be guided through three simple steps:

1. Choose your preferred mobile authenticator (e.g., Google Authenticator, Microsoft Authenticator, or FreeOTP) or install a third-party desktop browser extension/add-on Authenticator (example: Authenticator:2FA : Chrome, Firefox, Edge - https://authenticator.cc/).
   See our FAQs for more information.

2. Scan the QR code displayed on the screen using your authenticator app if you are using a mobile.
   or follow Unable to Scan? link to see get the KEY to be used in the Google Authenticator App in Chrome (desktop browser).

3. Enter the one-time code generated by the authenticator into the IDHUB page. You may also assign a name to the device so it appears clearly in your IDHUB settings for easier management.

If you encounter issues while scanning the barcode, you can configure the authenticator manually by selecting the Unable to Scan? link. This provides the necessary information to complete the setup without using the QR code

After setting up Two-Factor Authentication, every time you log in again to EAS or myEAS, you'll be required to use 2FA code from your authenticator app.

This will be the normal login experience:

1. Log in with email and password

2. Open your third-party Authenticator application previously installed and see the active one-time code (a new code is generated there every 30 seconds).

3. Enter the code on the second IDHUB validation screen, the Security Check (2FA).

3. You will be redirected to your myEAS. From myEAS, you can navigate to EAS using the following normal access: