Frequently Asked Questions

DOE OSTI Account

A DOE OSTI Account allows users to use single sign-on for each web product associated with one DOE OSTI Account. While many OSTI web products do not require an account to use the product, additional features are often available to users when signed in.

OSTI is in the process of migrating our web product account management to DOE OSTI Accounts using the account management service Okta.

Okta is a cloud-based identity and access management service that allows easy and secure sign-in to DOE OSTI applications with a single sign-in. DOE OSTI has chosen to utilize Okta technology to service accounts and manage passwords. You may receive some emails regarding accounts, password setting, etc., from Okta.com on behalf of DOE OSTI. These emails are not spam and will contain instructions and necessary information to manage your DOE OSTI account.

Two (2)-factor (2FA) or multi-factor authentication (MFA) is an account sign-in process that requires multiple pieces of evidence to prove your identity and gain access to your account. MFA helps safeguard your personal data against unauthorized access. Options you may choose for MFA include, for example, Authy, Google Authenticator, Microsoft Authenticator, and LastPass, etc.

In response to the January 2022 Memorandum for the Heads of Executive Departments and Agencies, Moving the U.S. Government Toward Zero Trust Cybersecurity Principles, M-22-09, OSTI has taken steps to incorporate enhanced user management options and 2-Factor Authentication.

Currently, the following DOE OSTI products use Okta to provide a single sign-in environment:

PIDs@OSTI.GOV: https://www.osti.gov/pids/
Science Research Connection (SRC): https://www.osti.gov/src/

Once registered and approved by each web product's administrative team, you may access each web product with the same sign-in credentials. You only need to register for a DOE OSTI account managed by Okta one time. After this initial registration/account set up, you will subsequently request access to other OSTI products. Each product has different requirements for access, including different information collected. Please look for "Register", "Sign Up", or "Request Access" on the product homepage to begin this process.

DOE OSTI is progressing towards a single sign-in environment that will allow access to web product registered accounts with one set of sign-in credentials. We do not currently have estimates for when other products will be brought into the environment. As each DOE OSTI tool and service is brought into the single sign-in environment, they will be added to the list above.


Sign In Help

Your username is the email you provided at registration for your DOE OSTI account. If you do not remember the email you registered with, please email help@osti.gov.

DOE OSTI needs to confirm your email address before providing you access to your DOE OSTI account(s). We utilize the Okta service for account password management for DOE OSTI accounts. Communications related to account creation or password recovery will come from Okta.com on behalf of DOE OSTI. These emails are not spam and will contain instructions and necessary information to manage your DOE OSTI account. If you have any questions regarding the legitimacy of an email you receive from Okta on behalf of DOE OSTI, please email help@osti.gov.

In order to enable PIV/CAC sign in, you will need to email your card's Subject Alternative Name to help@osti.gov.

From the list of authenticators, choose and select "Smart Card Authenticator" to setup.

Authenticator List

This should open up a screen (similar to the one below) that allows you to choose a certificate. Select the certificate from Issuer "Entrust" and press "Certificate Information" on the lower left.

Select the certificate from Issuer "Entrust" and press "Certificate Information" on the lower left of the pop-up

Click on the "Details" tab and scroll through the list to find a line item "Subject Alternative Name". Click on this.

Subject Alternative Name

Look for the label "Principal Name" and locate the 14-digit number followed by "FEDIDCARD.GOV". Please provide this 14 digit number to help@osti.gov to be added to your account.

If you cannot locate this number via the method described above, please contact your local IT administrator or help desk for assistance.

If you work at a site where phones are not available or you don't want to use a mobile device to download an authenticator application, you may use a password manager to provide MFA functionality. Below are some common password managers often used.

LastPass
BitWarden

If your site uses a different manager, please reach out to your site IT administrator or OSTI (help@osti.gov) for assistance.

You may also download and use a browser extension on your laptop or desktop. Many authenticators who have an authenticator app, such as Google Authenticator and Microsoft, also offer a browser extension that does not require the use of a mobile device. To utilize this option, you would download and setup the desired extension, then use the option "Authenticator" during the DOE OSTI Account sign up process and follow the prompts. You will need to select "Can't Scan" under the QR code and enter the information manually in order to complete the authentication process.


What should I do if...

  1. If you have forgotten your password, begin the sign-in process by entering your username (email) and selecting "Next."
  2. When asked to verify with your password, click on the link for "Forgot password?" found at the bottom of the screen.
  3. When directed, select "Send Me an Email."
  4. The screen will refresh with a message that the email was sent.
  5. Look for an email from Okta.com with a link to reset your password and an optional verification code.
  6. You may choose to either click the link in the email or copy the verification code into the sign-in screen.
  7. Once this is completed, you will be able to reset your password with the requirements listed on the page.
Please email help@osti.gov.
If the link received to reset your password is not working, please email help@osti.gov.
Please check your inbox and spam folder to ensure the emails were not missed. If you are unable to locate, please email help@osti.gov.
  • If the link to reset your password expired, please generate a new link following the "Forgot password?" option in the sign-in process.
  • If the link to verify your email account during the DOE OSTI account creation process has expired, please enter your email as if you were a returning user and select "Next."
  • A new verification email will be generated automatically and you may return to the account creation process after verifying your email.
  • If you are unable to create new links through either of the processes described above, please email help@osti.gov.
Please email help@osti.gov. A DOE OSTI administrator will need to unlock your account.

If you exceed the maximum number of tries, the card will lock you out and you will receive the "Smart Card is blocked" message. In this situation, DOE OSTI is unable to unlock your account. You will need to schedule an appointment with your local badging office to reset your PIN in order to unlock your account. To make an appointment, please contact your local Sponsor, DOE/Site badging office or use USAcess AI Scheduler.