Id MGT Ol HLP

Download as pdf or txt
Download as pdf or txt
You are on page 1of 91

Identity Management

Online Help

This is the online help for Identity Management on www.swift.com, also known as myProfile.

24 August 2018
Identity Management Table of Contents
Online Help

Table of Contents

1 Release Notes.......................................................................................................................................... 9

2 Pages...................................................................................................................................................... 10
2.1 Profiles Tab............................................................................................................................................ 10
2.1.1 Profiles - Applications.................................................................................................................. 10
2.1.2 Profiles - Request Accesses....................................................................................................... 10
2.1.3 Profiles - Contact Roles...............................................................................................................11
2.1.4 Profiles - Registration Info........................................................................................................... 11
2.2 Personal Info Tab................................................................................................................................... 12
2.2.1 Personal Information - Identity.....................................................................................................12
2.2.2 Personal Information - Notifications.............................................................................................12
2.2.3 Personal Information - Newsletters..............................................................................................12
2.3 Admin Functions Tab............................................................................................................................. 13
2.3.1 User Profiles................................................................................................................................ 13
2.3.2 Administration..............................................................................................................................14
2.3.3 Manage SWIFTRef Users........................................................................................................... 16
2.3.4 Manage Watch and BI Users.......................................................................................................17
2.3.5 Manage SEPAIO Users............................................................................................................... 18
2.4 Search Users Tab.................................................................................................................................. 18
2.5 mySWIFT Tab........................................................................................................................................ 19
2.6 Online Help Tab..................................................................................................................................... 19
2.7 Enable 2-step Verification Page.............................................................................................................19

3 User Tasks..............................................................................................................................................20
3.1 Log in to mySWIFT................................................................................................................................ 20
3.2 Link your Account to an Institution.........................................................................................................21
3.3 Request Another Profile........................................................................................................................ 22
3.4 Switch to Another Profile....................................................................................................................... 23
3.5 Set Up a Login Seal...............................................................................................................................23
3.6 Search for an Administrator................................................................................................................... 24
3.7 Application Access................................................................................................................................ 25
3.7.1 Request Access to an Application............................................................................................... 25
3.7.2 Request Removal of an Application............................................................................................ 26
3.7.3 Request Trial Access for SWIFTRef............................................................................................ 26

24 August 2018 2
Identity Management Table of Contents
Online Help

3.7.4 View Granted SWIFTRef User Access Rights.............................................................................27


3.7.5 View Granted Watch User Access Rights................................................................................... 28
3.8 Contact Roles........................................................................................................................................ 29
3.8.1 Register to a Role........................................................................................................................29
3.8.2 Deregister from a Role................................................................................................................ 30
3.9 Registration Info.....................................................................................................................................30
3.9.1 Prolong Your Registration............................................................................................................30
3.9.2 Contact Your swift.com Administrator.......................................................................................... 32
3.9.3 Register a Private Profile against a BIC or PIC........................................................................... 32
3.10 Your Identity........................................................................................................................................... 33
3.10.1 Change Your Personal Data...................................................................................................... 33
3.10.2 Change Your Password............................................................................................................. 33
3.10.3 Change Your Password-reset Question..................................................................................... 34
3.10.4 Reset Your Password.................................................................................................................34
3.10.5 Change Your Contact Information..............................................................................................35
3.11 Notifications........................................................................................................................................... 36
3.11.1 Subscribe to a Notification.........................................................................................................36
3.11.2 Unsubscribe from a Notification.................................................................................................36
3.12 Newsletters............................................................................................................................................ 37
3.12.1 Subscribe to a Newsletter..........................................................................................................37
3.12.2 Unsubscribe from a Newsletter................................................................................................. 37
3.13 2-step Verification.................................................................................................................................. 38
3.13.1 Set Up 2-step Verification.......................................................................................................... 38
3.13.2 Manage 2-step Verification........................................................................................................ 39
3.13.3 Log in with 2-step Verification.................................................................................................... 40
3.13.4 Reset 2-step Verification............................................................................................................40
3.13.5 Un-trust 2-step Verification Devices...........................................................................................41
3.13.6 Disable 2-step Verification......................................................................................................... 42

4 Administrator Tasks.............................................................................................................................. 43
4.1 Administrator Types............................................................................................................................... 43
4.2 User Management................................................................................................................................. 43
4.2.1 User Profiles................................................................................................................................ 43
4.2.2 Search for a User........................................................................................................................ 45
4.2.3 Assign A Contact Role to a User................................................................................................. 47
4.2.4 Assign Application Access to a User........................................................................................... 47
4.2.5 Filter User Requests....................................................................................................................48

24 August 2018 3
Identity Management Table of Contents
Online Help

4.2.6 Approve a Pending Request........................................................................................................48


4.2.7 Reject a Pending Request...........................................................................................................49
4.2.8 Edit a User's Profile..................................................................................................................... 49
4.2.9 Add or Change an Employee Number.........................................................................................50
4.2.10 Define the Password Expiration Period......................................................................................51
4.2.11 Remove the Password Reset Question..................................................................................... 51
4.2.12 Add a swift.com Administrator Role to a User........................................................................... 52
4.2.13 Remove the swift.com Administrator Role from a User............................................................. 52
4.2.14 Delete a User.............................................................................................................................53
4.2.15 Bulk Delete Users...................................................................................................................... 53
4.2.16 Recover a User..........................................................................................................................54
4.2.17 Remove a User..........................................................................................................................54
4.3 Standard Profiles................................................................................................................................... 55
4.3.1 Create a Standard Profile............................................................................................................ 55
4.3.2 Edit a Standard Profile................................................................................................................ 56
4.3.3 Delete a Standard Profile............................................................................................................ 56
4.4 Reports.................................................................................................................................................. 56
4.4.1 Generate an Audit Report........................................................................................................... 56
4.4.2 Generate a Delegation Report.................................................................................................... 57
4.4.3 Generate a User Report.............................................................................................................. 57
4.5 Domain Names...................................................................................................................................... 57
4.5.1 Add a Domain Name for a BIC.................................................................................................... 57
4.5.2 Remove a Domain Name for a BIC............................................................................................. 58
4.6 BIC Management...................................................................................................................................58
4.6.1 Update a BIC...............................................................................................................................58
4.6.2 Delegate a BIC............................................................................................................................ 59
4.6.3 Undelegate a BIC........................................................................................................................ 59
4.6.4 Change the Delegation of a BIC..................................................................................................59
4.7 Dual Approval........................................................................................................................................ 60
4.7.1 Request a Dual Approval.............................................................................................................60
4.7.2 Cancel a Dual Approval...............................................................................................................60
4.8 SWIFTRef Administration...................................................................................................................... 61
4.8.1 Specify the First SWIFTRef User Administrators For Your Institution..........................................61
4.8.2 Grant or Revoke User Access to a SWIFTRef Product Contract................................................ 61
4.8.3 Grant or Revoke Access to Daily Update.................................................................................... 62
4.8.4 Grant or Revoke Access to Download Automation......................................................................62

24 August 2018 4
Identity Management Table of Contents
Online Help

4.8.5 Manage SWIFTRef Contract Details........................................................................................... 63


4.8.6 Grant or Revoke SWIFTRef User Admin.....................................................................................63
4.8.7 Generate a SWIFTRef User Report............................................................................................ 63
4.9 Watch/Compliance Administration.........................................................................................................64
4.9.1 Grant or Revoke User Access to a Watch Product Contract....................................................... 64
4.9.2 Manage Watch User Restrictions................................................................................................ 64
4.9.3 Consult Watch Contract Details...................................................................................................67
4.9.4 Generate a Watch User Report................................................................................................... 67
4.9.5 Grant or Revoke the Watch User Admin Role............................................................................. 68
4.10 Manage your Whitelist........................................................................................................................... 68
4.10.1 Check (and create) your Whitelist..............................................................................................69
4.10.2 Configure your Whitelist.............................................................................................................69

5 Application Descriptions...................................................................................................................... 71
5.1 Support Applications..............................................................................................................................71
5.1.1 Access to Support via Case Manager, phone or email............................................................... 71
5.1.2 myConfig..................................................................................................................................... 71
5.1.3 Download Center.........................................................................................................................72
5.1.4 Knowledge Base..........................................................................................................................72
5.1.5 Leased Line Utilisation................................................................................................................ 73
5.1.6 Operational Status.......................................................................................................................73
5.1.7 Premium Plus documentation..................................................................................................... 74
5.1.8 SIBOS CCM................................................................................................................................ 74
5.1.9 SWIFTNet Services Directory..................................................................................................... 74
5.1.10 T2S operational support............................................................................................................ 74
5.1.11 Training management................................................................................................................ 74
5.1.12 Documentation (User Handbook Online)...................................................................................74
5.2 Security Applications............................................................................................................................. 75
5.3 Ordering and Billing Applications...........................................................................................................75
5.3.1 Billing Information........................................................................................................................ 75
5.3.2 Configuration Changes................................................................................................................75
5.3.3 Edit Billing and Shipping Addresses............................................................................................75
5.3.4 Non-connected BIC ordering.......................................................................................................75
5.3.5 On-boarding................................................................................................................................ 75
5.3.6 Order Status................................................................................................................................ 75
5.3.7 Ordering...................................................................................................................................... 75
5.3.8 Refdata ordering..........................................................................................................................76

24 August 2018 5
Identity Management Table of Contents
Online Help

5.3.9 Service Approval......................................................................................................................... 76


5.4 Licences................................................................................................................................................ 76
5.4.1 Accord......................................................................................................................................... 76
5.4.2 Developer Resource Centre........................................................................................................ 76
5.4.3 EURO1/STEP1 Data Management............................................................................................. 76
5.4.4 EURO1/STEP1 File Download.................................................................................................... 76
5.4.5 EURO1/STEP1 Online Directory.................................................................................................76
5.4.6 Fixed Fee Reporting.................................................................................................................... 76
5.4.7 Know Your Customer...................................................................................................................76
5.4.8 MyStandards............................................................................................................................... 77
5.4.9 Remote Support.......................................................................................................................... 77
5.4.10 SEPAIO API Access.................................................................................................................. 77
5.4.11 SEPAIO Data Management....................................................................................................... 77
5.4.12 SEPAIO Download.....................................................................................................................77
5.4.13 SEPAIO Management Information.............................................................................................77
5.4.14 SWIFTRef Products...................................................................................................................77
5.4.15 SWIFTRef EURO1/STEP1 Products......................................................................................... 77
5.4.16 Watch Products......................................................................................................................... 78
5.5 Board / eAGM Applications....................................................................................................................79
5.5.1 AFC Board site............................................................................................................................ 79
5.5.2 Board Site....................................................................................................................................79
5.5.3 SWIFT Chairpersons Site............................................................................................................79
5.5.4 SWIFT EG Site............................................................................................................................ 80
5.5.5 Shareholder info and eAGM........................................................................................................ 80
5.5.6 TPC Board Site........................................................................................................................... 80

6 Contact Role Descriptions....................................................................................................................81


6.1 Security Contact Roles.......................................................................................................................... 81
6.1.1 Alliance Lite security officer.........................................................................................................81
6.1.2 FINCopy business officer............................................................................................................ 81
6.1.3 ISAC CISO.................................................................................................................................. 81
6.1.4 ISAC SOC 24x7...........................................................................................................................81
6.1.5 SEPAIO Administrator................................................................................................................. 81
6.1.6 SWIFTAlliance LSO..................................................................................................................... 81
6.1.7 SWIFTAlliance RSO.................................................................................................................... 81
6.1.8 SWIFTNet ITB security officer.....................................................................................................81
6.1.9 SWIFTNet Live security officer.................................................................................................... 82

24 August 2018 6
Identity Management Table of Contents
Online Help

6.1.10 SWIFTNet copy Business officer............................................................................................... 82


6.1.11 SWIFTRef GPI Data Manager................................................................................................... 82
6.1.12 SWIFTRef Group Data Manager............................................................................................... 82
6.1.13 SWIFTRef SSI Data Manager................................................................................................... 82
6.1.14 SWIFTRef user administrator.................................................................................................... 82
6.1.15 SWIFT.com administrator.......................................................................................................... 83
6.1.16 Watch User................................................................................................................................ 83
6.1.17 Watch User Administrator..........................................................................................................83
6.2 Ordering and Billing Contact Roles....................................................................................................... 83
6.2.1 SWIFT India RTGS......................................................................................................................83
6.2.2 Service approver......................................................................................................................... 84
6.3 Support Contact Roles.......................................................................................................................... 84
6.3.1 AMO Operational Contact........................................................................................................... 84
6.3.2 SWIFT Connectivity Email Contact............................................................................................. 84
6.3.3 SWIFT interface (Alliance)...........................................................................................................84
6.3.4 SWIFT Network Engineer............................................................................................................84
6.4 Business Roles......................................................................................................................................84
6.4.1 ACCORD Broker User.................................................................................................................84
6.4.2 ACCORD central counterparty user............................................................................................ 84
6.4.3 Board Member.............................................................................................................................84
6.4.4 Chair person................................................................................................................................84
6.4.5 Chair person Secretary............................................................................................................... 85
6.4.6 KYC Administrator....................................................................................................................... 85
6.4.7 KYC Approver..............................................................................................................................85
6.4.8 KYC Granter................................................................................................................................ 85
6.4.9 KYC Publisher............................................................................................................................. 85
6.4.10 KYC Qualifier.............................................................................................................................85
6.4.11 KYC Requester..........................................................................................................................85
6.4.12 KYC Submitter...........................................................................................................................85
6.4.13 KYC SWIFT Profile Granter.......................................................................................................85
6.4.14 KYC SWIFT Profile Qualifier..................................................................................................... 86
6.4.15 KYC SWIFT Profile Requester.................................................................................................. 86
6.4.16 KYC SWIFT Profile Viewer........................................................................................................ 86
6.4.17 KYC System Administrator........................................................................................................ 86
6.4.18 KYC User Simulation................................................................................................................. 86
6.4.19 KYC Viewer............................................................................................................................... 86

24 August 2018 7
Identity Management Table of Contents
Online Help

6.4.20 LMS Administrator..................................................................................................................... 86


6.4.21 LMS Compliance Professional...................................................................................................86
6.4.22 LMS Manager............................................................................................................................ 86
6.4.23 LMS Operator............................................................................................................................ 87
6.4.24 LMS Reviewer........................................................................................................................... 87
6.4.25 LMS User Manager................................................................................................................... 87
6.4.26 Primary Business Contact......................................................................................................... 87
6.4.27 SA Administrator........................................................................................................................87
6.4.28 SA Approver.............................................................................................................................. 87
6.4.29 SA Granter.................................................................................................................................87
6.4.30 SA Requester............................................................................................................................ 87
6.4.31 SA Submitter............................................................................................................................. 88
6.4.32 SA User Manager...................................................................................................................... 88
6.4.33 SA Viewer.................................................................................................................................. 88
6.4.34 SEPAIO API User...................................................................................................................... 88
6.4.35 SEPAIO Data Owner................................................................................................................. 88
6.4.36 SEPAIO Download User............................................................................................................ 88
6.4.37 SWIFT training manager............................................................................................................88
6.5 Support Admin Roles.............................................................................................................................88
6.5.1 Monitoring Data (Maintenance) Administrator............................................................................. 88
6.5.2 Solution Provider KB User...........................................................................................................89
6.6 Premium Plus Contact Roles.................................................................................................................89
6.6.1 Level 1 Escalation Contact (Primary).......................................................................................... 89
6.6.2 Level 1 Escalation Contact (Back-up)..........................................................................................89
6.6.3 Level 2 Escalation Contact (Primary).......................................................................................... 89
6.6.4 Level 2 Escalation Contact (Back-up)..........................................................................................89
6.6.5 Level 3 Escalation Contact (Primary).......................................................................................... 89
6.6.6 Level 3 Escalation Contact (Back-up)..........................................................................................89
6.6.7 Level 4 Escalation Contact (Primary).......................................................................................... 90
6.6.8 Level 4 Escalation Contact (Back-up)..........................................................................................90
6.6.9 SWIFT service manager..............................................................................................................90
6.6.10 SWIFT service manager Back-up..............................................................................................90

Legal Notices................................................................................................................................................... 91

24 August 2018 8
Identity Management Release Notes
Online Help

1 Release Notes
Release 1.18 - 28 July 2018
In this release, SWIFTRef PAK roles have been migrated from IDM. Therefore, the following roles
have been removed from the documentation:
• SWIFTRef PAK for IBAN
• SWIFTRef PAK for SEPA
• SWIFTRef PAK for SSI
• SWIFTRef PAK Administrator
In addition to this change, there has also been an update to many of the procedures not linked to
this release.

Links to other documentation


• Frequently asked questions about 2-step verification: Knowledge Base tip 5019353.
• Troubleshooting 2-step verification: Knowledge Base tip 5020131.

24 August 2018 9
Identity Management Pages
Online Help

2 Pages

2.1 Profiles Tab


Your Profile
SWIFT's Identity Management application displays your profile information under the Your Profile
heading.
There are several ways to navigate to the submenus of the Profiles tab:
• Hover over the Profiles tab to expand the submenus, then click the submenu.
• When the Profiles tab is displayed, then its submenus are arranged as tabs under the Your
Profile information. Click a submenu tab to display its information.

Request another profile


Click Request another profile.
If you have a private profile and you want to register this profile against an institution, then see
Register a Private Profile against a BIC or PIC on page 32.

2.1.1 Profiles - Applications


Description
This page displays all the applications you have been granted access to, along with a description
and a link to access the application.

How to
Switch to Another Profile on page 23

2.1.2 Profiles - Request Accesses


Description
This page displays all the available SWIFT applications. As a user you can view and manage your
access to SWIFT applications.
Click the link next to an application to read its description.
An access request must be granted by a swift.com administrator of your institution before you can
access the application. Alternatively a swift.com administrator can assign access to an application
without prior access request.

Icons
Icon table

Icon Description

A check mark next to an application means that you have access to it.

24 August 2018 10
Identity Management Pages
Online Help

Icon Description

An hourglass means that your request is pending approval from a swift.com administrator.

A lock means that the application access is managed by SWIFT directly and that you must
ask SWIFT to get access to the application.

Applications Descriptions
Application Descriptions on page 71

2.1.3 Profiles - Contact Roles


Description
This page displays your contact roles towards SWIFT. Select for which roles you will be the primary
contact.
Click the link next to a contact role to display a role description.

Role management
The registration of some roles is automatic. Other roles, such as the SWIFTAlliance LSO role
require swift.com administrator approval. A padlock icon next to a role indicates that the access is
managed by SWIFT directly and that you must ask SWIFT to assign this role to you.
Alternatively a swift.com administrator can assign certain roles without prior access request.

How to
Register to a Role on page 29
Deregister from a Role on page 30
Switch to Another Profile on page 23

Contact roles descriptions


Contact Role Descriptions on page 81

2.1.4 Profiles - Registration Info


Description
This page displays the information about your profile.
You can find and edit your registration info.
You can find a list of your administrators and contact them by e-mail.

How to
Add or Change an Employee Number on page 50
Personal Info Tab on page 12
Contact Your swift.com Administrator on page 32
Switch to Another Profile on page 23

24 August 2018 11
Identity Management Pages
Online Help

2.2 Personal Info Tab

2.2.1 Personal Information - Identity


Description
On this page you can find and edit all the personal information related to your profile.

How to
Change Your Personal Data on page 33
Change Your Password on page 33

Change Your Password-reset Question on page 34


Change Your Contact Information on page 35
Set Up 2-step Verification on page 38
Manage 2-step Verification on page 39
Log in with 2-step Verification on page 40
Reset 2-step Verification on page 40

2.2.2 Personal Information - Notifications


Description
On this page you can subscribe or unsubscribe to receive operational service notifications in case
of certain events.

How to
Subscribe to a Notification on page 36
Unsubscribe from a Notification on page 36

2.2.3 Personal Information - Newsletters


Description
On this page you can subscribe or unsubscribe to receive certain SWIFT newsletters to inform you
about the latest news, known issues and solutions, and frequently asked questions concerning
SWIFT products and services.

How to
Subscribe to a Newsletter on page 37
Unsubscribe from a Newsletter on page 37

24 August 2018 12
Identity Management Pages
Online Help

2.3 Admin Functions Tab

2.3.1 User Profiles

2.3.1.1 Requests
Description
This page displays all user requests submitted to you for approval.

How to
Filter User Requests on page 48
Approve a Pending Request on page 48
Reject a Pending Request on page 49

2.3.1.2 Change User


Description
On this page you can change the roles and access rights of a user.

How to
Edit a User's Profile on page 49

2.3.1.3 Standard Profile


Description
On this page you can create, edit or delete a Standard Profile for a BIC. These Standard Profiles
are used to pre-define roles and access to applications during user registration. When a user of
your institution selects a Standard Profile during registration, the set of application access requests
defined in that profile will automatically be selected.

How to
Create a Standard Profile on page 55
Edit a Standard Profile on page 56
Delete a Standard Profile on page 56

2.3.1.4 Delete Users


Description
On this page you can delete a user from an institution. A deleted user can be recovered. To
permanently remove a deleted user, see Remove a User on page 54.

How to
Delete a User on page 53

24 August 2018 13
Identity Management Pages
Online Help

2.3.1.5 Recover Users


Description
On this page you can recover a user that you have previously deleted from an institution.

How to
Recover a User on page 54

2.3.1.6 Remove Users


Description
On this page you can remove one or more users from an institution.

How to
Remove a User on page 54

2.3.2 Administration

2.3.2.1 Reports
Description
On this page a swift.com administrator can generate the following types of reports for the
organisations that are in the scope of control:
• audit reports
• swift.com admin delegation reports
• user reports

How to
Generate an Audit Report on page 56
Generate a Delegation Report on page 57
Generate a User Report on page 57

2.3.2.2 Delegation
Description
Your institution can delegate the approval of registration requests and the control of access rights to
the legal parent, group parent, location (hub), or member concentrator of your institution.
If you are a swift.com administrator, you can keep your local swift.com administration rights. All
swift.com administrators, that is, the swift.com administrators of your institution and the swift.com
administrators of the parent institution, will receive registration requests. Approval by one swift.com
administrator is sufficient to process a request.
If your institution has delegated swift.com administration to another SWIFT customer, then you will
not be able to see the names of the swift.com administrators of this other customer.

24 August 2018 14
Identity Management Pages
Online Help

How to
Delegate a BIC on page 59
Undelegate a BIC on page 59
Change the Delegation of a BIC on page 59

2.3.2.3 Dual Approval


Description
On this page you can manage the dual approvals (also known as 4-eyes approval) for the roles that
your customers can request.
Dual approval currently exists for granting or revoking the following roles:
• SWIFT Alliance LSO/RSO
• swift.com Administrator

How to
Request a Dual Approval on page 60
Cancel a Dual Approval on page 60

2.3.2.4 Password Policy


On this page you can view and change the password policy for a BIC.
The password expiration can be set to 3, 6, 12 or 24 months.
The default value is 3 months.

How to
Define the Password Expiration Period on page 51

2.3.2.5 Domain Names


Description
On this page you can manage the domain names allowed for your institution. Only persons with an
email address from the whitelist of allowed domain names can register as user of your institution.
Note The whitelist of a BIC is the combination of the whitelists of that BIC and its group
parent.
An empty whitelist implies that registration of new users from any domain is allowed.

Important When you are the administrator of the parent of a group and you define a list of
allowed domain names for your own BIC, then this list applies for all the subsidiaries of
your group, even for those subsidiaries who did not delegate swift.com administration
to you. As soon as you have defined this list, all your local subsidiaries MUST use a
list of allowed domain names.

How to
Add a Domain Name for a BIC on page 57
Remove a Domain Name for a BIC on page 58

24 August 2018 15
Identity Management Pages
Online Help

2.3.2.6 BIC Update


Description
On this page you can update a BIC by setting a new one.

How to
Update a BIC on page 58

2.3.3 Manage SWIFTRef Users

2.3.3.1 Grant/revoke Access


Description
On this page you can grant or revoke user access to a SWIFTRef product contract.

How to
Grant or Revoke User Access to a SWIFTRef Product Contract on page 61

2.3.3.2 Contract Details


Description
On this page you can view contract details and manage pairs of passkey and domain name that
can be used by users to request access to the products in the contract.

How to
Manage SWIFTRef Contract Details on page 63

2.3.3.3 User Report


Description
On this page you can generate a report that contains all users who have access to SWIFTRef
products for a specific contract.
Note This report does not list the users who have access to SWIFTRef products in trial
mode. That information can be obtained from the swift.com administrator of your
institution.

How to
Generate a SWIFTRef User Report on page 63

2.3.3.4 Grant/revoke SWIFTRef user admin


Description
On this page you can grant or revoke the SWIFTRef user administrator role to a person in your
institution and you can change the contracts that a SWIFTRef user administrator can manage.

24 August 2018 16
Identity Management Pages
Online Help

How to
Grant or Revoke SWIFTRef User Admin on page 63

2.3.3.5 Grant/revoke daily update


Description
On this page you can grant or revoke user access to the daily update report for a specific product.

How to
Grant or Revoke Access to Daily Update on page 62

2.3.3.6 Grant/revoke download automation


Description
On this page you can grant or revoke user access to automated report downloads for a specific
product.

How to
Grant or Revoke Access to Download Automation on page 62

2.3.4 Manage Watch and BI Users

2.3.4.1 Grant/revoke Access


Description
On this page you can grant or revoke user access to a Watch product contract. By default a user
has full access. To limit the scope of access for a user, see Manage Watch User Restrictions on
page 64.

How to
Grant or Revoke User Access to a Watch Product Contract on page 64

2.3.4.2 Contract Details


Description
On this page you consult Watch product contract details and view the profile of another Watch
product user.

How to
Consult Watch Contract Details on page 67

24 August 2018 17
Identity Management Pages
Online Help

2.3.4.3 User Report


Description
On this page you can generate a report that contains all users who have access to Watch products
for a specific contract.

How to
Generate a Watch User Report on page 67

2.3.4.4 Grant/revoke Watch User Admin


Description
On this page you can grant or revoke the Watch product user administrator role to a person in your
institution and you can change the contracts that a Watch product user administrator can manage.

How to
Grant or Revoke the Watch User Admin Role on page 68

2.3.4.5 Change User Restrictions


Description
On this page you can manage the scope of access for users that have access to Watch products.

How to
Manage Watch User Restrictions on page 64

2.3.5 Manage SEPAIO Users


Description
On this page you can search for specific SEPAIO users.

How to
Search for a User on page 45

2.4 Search Users Tab


Description
On this page you can search for specific users and export the search results to Microsoft Excel.

How to
Search for a User on page 45

24 August 2018 18
Identity Management Pages
Online Help

2.5 mySWIFT Tab


Description
Click the tab to navigate to the mySWIFT portal. For a short video on the subject, click https://
www.swift.com/sites/default/files/assets/myswift_master_1280.mp4.

2.6 Online Help Tab


Click the tab to access the HTML version of the online help.

2.7 Enable 2-step Verification Page


Description
On this page you can set up 2-step verification.

How to
Set Up 2-step Verification on page 38

24 August 2018 19
Identity Management User Tasks
Online Help

3 User Tasks

3.1 Log in to mySWIFT


Procedure
1. Log in to mySWIFT.
2. Hover over mySWIFT on top of the page.
3. Click Login to mySWIFT .
4. On the login page, enter the e-mail address and password that you registered with. If you have
registered more than one BIC, PIC, or customer number against this e-mail address, then also
select the correct profile from the drop-down that lists all your registered profiles.
Tip To set up a login seal, click the Setup a Login-seal to protect yourself against
phishing attacks link. For more information, see Set Up a Login Seal on page
23.
5. If the ENABLE 2-STEP VERIFICATION page appears, then you must set up 2-step verification.
See Set Up 2-step Verification on page 38.
After you have set up 2-step verification, the 2-STEP VERIFICATION window appears. Enter
the verification code and click Verify Code .
6. If you have not yet set up your secret password reset question and answer, then the following
window appears.

7. Set up your secret password reset question and answer.

24 August 2018 20
Identity Management User Tasks
Online Help

You are logged in to mySWIFT.


Click my Tools and select myProfile to view your profile

3.2 Link your Account to an Institution


To access applications and Support information for an institution, you must link its BIC, PIC, or
customer number to your account.
Procedure
1. Log in to swift.com. See Log in to mySWIFT on page 20.
The MANAGE YOUR PROFILE page appears.
2. Click the Register for an institution link.
The Register for an institution page appears.

3. Enter the BIC, PIC, or Customer number, then click Go to verify the institution details.
4. If the institution name displayed in the Your selected institution field is correct, then click
Next .

The second page of the swift.com user registration request form appears.
5. Complete the user registration. If the institution for which you want to register has defined
standard profiles, then select a standard profile from the drop-down list. If no standard profiles
are defined, then provide a business justification, select the password expiration, then select
the applications you want to subscribe to.
• E-mail address: Verify your e-mail address, which will be the user name of the profile.
• Password expiration period: If the institution has not specified a mandatory password
expiration time, then select the time that your password will be valid. Once the password has
expired you must use the Forgot your password link on the login window to define a new
password.
6. Click Submit .
The system displays a confirmation message.
7. Click Submit .
The system displays a confirmation message.
A swift.com administrator of the selected BIC, PIC, or customer number will approve or reject your
request for registration and you will receive an e-mail with the status of your registration. Once your
request for registration is approved you will be able to access the requested applications.

24 August 2018 21
Identity Management User Tasks
Online Help

3.3 Request Another Profile


It is possible to use the same profile to request another profile.
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile from the drop-down list.

The MANAGE YOUR PROFILE page appears.


4. Click the link Request another profile that appears to the right of your customer details.

The Request another profile page appears.

5. Provide the additional BIC/PIC code and click Next .


The second page of the swift.com user registration request form appears.
6. Complete the user registration. Provide a business justification, select the password expiration,
select the services you want to subscribe to and click Submit .
The system displays a confirmation message.

24 August 2018 22
Identity Management User Tasks
Online Help

A swift.com administrator of the selected BIC will approve or reject your request for registration and
you will receive an e-mail with the status of your registration. Once your request for registration is
approved you will be able to log in to your new profile.

Important As long as your request is pending, you will not be able to make another request until
the pending request has been approved or rejected by an administrator.
If your request is rejected three times then, for security reasons, all your roles (except
for critical and important roles) are disabled. You must contact your administrator to re-
enable your roles.

3.4 Switch to Another Profile


You can only be logged in with one profile at a time. To switch to another profile you must log out of
your current profile first, then log in with another profile.
Procedure
1. Click Logout in the top-right corner.
2. Log in with another profile. See Log in to mySWIFT on page 20.

3.5 Set Up a Login Seal


A login seal is a private image or text that you can upload to swift.com, and that is displayed on the
login page. Set up a login seal to assure yourself that the login page comes from swift.com.
SWIFT will set a cookie on your computer with a reference number to the login seal to be
displayed. Only swift.com knows which login seal corresponds to this reference number, so only
swift.com will be able to display the correct image or text that you have defined. Anybody who uses
your PC will see the login seal. Therefore, do not use confidential data as your login seal.
If you have set up a login seal, and you do NOT see it on the login page, then this indicates that the
login page does not come from swift.com, or that your local PC or browser configuration has
changed. If you delete your browser cookies, then the seal will not appear.
Procedure
1. On the home page, click mySWIFT > Access mySWIFT.
The Sign in with your swift.com credentials page appears.

24 August 2018 23
Identity Management User Tasks
Online Help

2. Click the Setup a Login-seal to protect yourself against phishing attacks link.
The Manage login seal page appears.

3. Retype the characters that are displayed as challenge. They are NOT case sensitive.
4. Select the type of seal you want to use:
• Text seal: Type a text phrase that will appear on the login page.
• Image seal: Click the Browse button to upload an image that will appear on the login page.
You can upload image files of type GIF or JPEG with a maximum file size of 5 Mb.
Tip Click the Preview button to see how the picture or text will look on the login
screen.
5. When you are happy with the result, click Save Login seal .
From now on your login seal appears on the login page.
The seal expires after one year. The login screen displays the date on which the login seal will
expire.
Tip To change the login seal, click the image or text on the screen.

3.6 Search for an Administrator


Use the Search Users functionality to locate registered users within your institution, such as
administrators.
Procedure
1. Enter the search criteria: select Contact Roles in the first dropdown box, leave Equal in the
second dropdown box, then select the type of administrator that you are looking for.
2. Optionally add more search criteria.

Search criterion Description

Email address The email address

BIC/PIC The Business Identifier Code or Partner Identifier Code

Name First name or last name

Institution name The officially registered name of the institution

24 August 2018 24
Identity Management User Tasks
Online Help

Search criterion Description

Customer # The customer number

Registration # Also known as Support number in Profiles > Registration Info

Contact Roles Select a contact role in the drop-down menu

Application Accesses Select an application in the drop-down menu

3. Click Search .
4. The list of users appears, along with their e-mail address.
5. To export the list of users, click the Export to Excel link at the bottom right of the page, then
follow the instructions.

3.7 Application Access

3.7.1 Request Access to an Application


As a user you can request access to an application. This access request must then be granted by a
swift.com administrator of your institution before you can access the application. Alternatively a
swift.com administrator can assign access to an application without prior access request.
About this task
On the Profiles > Request Accesses page, do as follows:
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Click Search Users.
5. Select the Search criteria and Click Search .
6. Navigate to Profiles > Request Accesses.
7. Click Edit on the top right-hand corner of the page.
8. Select the box next to the application for which you want to request access.
9. Click Save on the top right-hand corner of the page.
10. A pop-up message confirms that the request is sent to an administrator for approval.
Tip An hourglass next to an application means that the request is still pending.
11. An e-mail is sent to you when the request is approved by an administrator.
Related information
Request Access to an Application on page 25
Request Trial Access for SWIFTRef on page 26
Request Removal of an Application on page 26

24 August 2018 25
Identity Management User Tasks
Online Help

3.7.2 Request Removal of an Application


As a user you can request removal of access to an application. This removal request must then be
granted by a swift.com administrator of your institution. Alternatively a swift.com administrator can
remove access from an application without prior access request.
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Select the Search criteria and click Search . To add more criteria click Add .
5. Navigate to Profiles > Request Accesses.
6. Click Edit on the top right-hand corner of the page.
7. Clear the box next to the application that you want to remove.
8. Click Save on the top right-hand corner of the page.
9. A pop-up message confirms that the request is sent to an administrator for approval.
Related information
Request Trial Access for SWIFTRef on page 26
Request Access to an Application on page 25

3.7.3 Request Trial Access for SWIFTRef


As a user you can request access to an application. This access request must then be granted by a
member of SWIFT staff with a commercial role.
About this task
On the Profiles > Request Accesses page, do as follows:
Procedure
1. On that page, go to the group Licenses.
An alphabetical list of all the products for which a licence is available appears.
2. On the line SWIFTRef products, click the link Request trial access.
The screen Request trial access for SWIFTRef products appears.

24 August 2018 26
Identity Management User Tasks
Online Help

Institution name: This field allows you to enter an institution name if you are not registered to
an institution. The institution name is shown if you are registered to an institution, in which case
the edit box becomes read-only.
Country code: This field allows you to enter the country code of the institution listed in the
Institution name.
3. Select the product(s) for which you would like to have a trial access and click OK .
A screen appears confirming that your request has been submitted and is awaiting approval.
Access to trial mode is granted: you receive an email that your access to SWIFTRef products
has been modified you will now be able to access the SWIFTRef products for a trial period of four
weeks.
Access to trial mode is rejected: you receive an email with an optional rejection reason described
under Business Justification.

3.7.4 View Granted SWIFTRef User Access Rights


Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Click the Search Users tab, enter the user details and click Search .
5. Click the e-mail address of the user.
The profile of the selected person appears.
6. On the Applications tab scroll down to the Licenses section.
This section lists all the applications for which the user has a license.

24 August 2018 27
Identity Management User Tasks
Online Help

7. In the Licenses section, clickMore Details next to SWIFTREF.

The SWIFTREF products page displays the products you have access to.

Tip To request access rights or remove access rights for SWIFTRef products, contact
a SWIFTRef administrator of your institution. See Search for an Administrator on
page 24.

3.7.5 View Granted Watch User Access Rights


Procedure
1. Log in to swift.com. See Log in to mySWIFT on page 20.
2. Navigate to Profiles > Request Accesses.
3. In the Licenses section, click the More info link next to the Watch products entry.
The Watch products page displays the contracts.

24 August 2018 28
Identity Management User Tasks
Online Help

4. For each Watch product with an active contract, click the More details link in the Restrictions
column to learn more about your access rights.
Watch product restrictions

Watch product restriction Description

Unrestricted You have full access.

Restricted white list Your access is restricted to information from the BICs in the BICs
of white list column.

Restricted black list Your access is restricted. You do not have access to information
from the BICs in the BICs of black list column.

Tip To request access rights or remove access rights for Watch products, contact a
swift.com administrator of your institution. See Search for an Administrator on
page 24.
Related information
KB tip 5019905

3.8 Contact Roles

3.8.1 Register to a Role


Support contact roles do not require an approval from an administrator.
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Click the Contact Roles tab.
5. Click Edit on the top right-hand corner of the page.
6. Select the box next to a contact role to become a primary contact for this role.
Icon table

Icon Description

A check mark next to an application means that you have access to it.

An hourglass means that your request is pending approval from a swift.com


administrator.

A lock means that the application access is managed by SWIFT directly and that you
must ask SWIFT to get access to the application.

7. Click Save on the top right-hand corner of the page.

24 August 2018 29
Identity Management User Tasks
Online Help

8. A pop-up message confirms that your contact information has been updated.
Related information
Deregister from a Role on page 30

3.8.2 Deregister from a Role


When you deregister from a Security Officer role, an e-mail is sent to SWIFT and to the
administrator.
About this task
The following roles can not be deregistered from within IDM, they must be deregistered from their
own platform:
• SWIFTNet Live security officer (Secure Channel)
• KYC-SA Administrator (KYC Security Attestation)
• KYC Registry Administrator (KYC Registry)
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Navigate to Profiles > Contact roles.
5. Click Edit on the top right-hand corner of the page.
6. Clear the box next to a contact role to deregister from the role.
7. Click Save on the top right-hand corner of the page.
8. A pop-up message confirms that your contact information has been sent to the relevant
administrator for approval.
Related information
Register to a Role on page 29

3.9 Registration Info

3.9.1 Prolong Your Registration


A user's swift.com profile expires every 6 or 12 months, depending on their roles. Users
automatically receive e-mail notifications in advance of the expiry date enabling them to prolong
their registration on swift.com. Sample e-mail notifications are provided below.
In addition to the e-mail notifications if a user does not take action to prolong their registration, then
a pop up message will appear on the mySWIFT login page to remind the user to prolong their
profile.
The timing of the e-mail notifications is shown in the table below.

24 August 2018 30
Identity Management User Tasks
Online Help

User Type First e-mail sent Second e-mail sent Final e-mail sent

User with a role defined 3 months before expiry 2 months before expiry 1 month before expiry
as Normal

User with a role defined 3 weeks before expiry 2 weeks before expiry 1 week before expiry
as Critical or Important

Impact on normal user profiles

Important If action is not taken in time, expired normal user profiles are deleted and swift.com
administrators receive an e-mail for each normal user profile of their institution that has
been deleted.

swift.com administrators can recover deleted normal user profiles during the 6 months following
deletion. After this time, such profiles will be removed and can no longer be recovered.
Users whose profile has expired cannot log in without first following the process to prolong their
account.
We remind you that it is best practice to remove users that are no longer required (for example
when someone leaves your institution).

Impact on Important and Critical profiles


Note Important or critical profiles will never be disabled or deleted by the system.
If action is not taken in time and the profile expires, swift.com administrators will receive an e-mail
notification that the profile has expired.

Sample notification e-mail


The following is a sample notification e-mail sent as notification of pending expiry.
Dear {Name},
You are being sent this email to ensure that you still have ownership of the email address that was
used to create your swift.com account.
To confirm the authenticity of this email, please refer to SWIFT Knowledge Base tip 5021778. You
can navigate to the Knowledge base by logging in and finding the Support section in the mySWIFT
application.
Your profile on www.swift.com {User's Registered Email} ({Customer Number} - {Institution Name} -
{BIC8}) is approaching expiry. To prolong and maintain the validity of this account, please click the
link below. You will be prompted to login to swift.com and confirm that the roles you may have are
still applicable to your work. Without any action on your part, your account will be disabled in
{Number of Days}.
To login and prolong your account, follow the link below:
{Unique Link}
We know the inconvenience of another procedure; however we cannot rely on last login date, or
regular use of an account to justify the ownership of this email address. This is a yearly process for
normal users without administrative roles.

Important For multi-profile users: each of your profiles has a separate expiry date.

24 August 2018 31
Identity Management User Tasks
Online Help

Please do not reply to this email. Contact SWIFT Customer Support should you require any
additional information.
Kind Regards, Swift.com Identity Management Team.

Procedure to prolong your registration


Click the unique link provided in the email that you receive from the Identity Management Team
and, if you are already logged in, it will direct you to your myProfile page within mySWIFT.
If you are not logged in to swift.com, then it will direct you to the swift.com login page.
When you arrive at the myProfile page, a dialog box appears asking you to confirm that all your
information is still correct. It also lists your Critical and Important roles and states how long your
registration is prolonged for. When you confirm that all your information is correct, click Prolong .

3.9.2 Contact Your swift.com Administrator


Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Click Search Users.
5. From the Search Criteria options, select BIC/PIC. Enter your institution's BIC/PIC, then click
Search .

6. Click ADD . From the Search Criteria options, select Contact Roles and select the swift.com
administrator role.
7. Click Search .
A list of your institution's swift.com administrators appears.
8. Copy the e-mail address of the swift.com administrator that you want to contact.

3.9.3 Register a Private Profile against a BIC or PIC


Procedure
1. Log in to swift.com with your private profile. See Log in to mySWIFT on page 20.
The MANAGE YOUR PROFILE page appears.
2. Click the Register for an institution link.
The Register for an institution window appears.
3. Enter the BIC, PIC, or SoldTo code and click Go .
The system displays the institution information for the code that was entered.
4. Click Next .
The Request another profile window appears.
5. Provide a business justification, select a password expiration time, select any additional
services you would like to gain access to, and click Submit .
A pop-up message confirms that the request is sent to an administrator for approval.
6. An e-mail is sent to you when the request is approved by an administrator.

24 August 2018 32
Identity Management User Tasks
Online Help

3.10 Your Identity

3.10.1 Change Your Personal Data


The fields that are unavailable can be modified by contacting SWIFT. If you want more information
on a certain field, hover the cursor over the ? next to the field.
About this task
On the Personal Info > Identity page, do as follows:
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Click Personal Info > Identity.
5. Click Edit on the top right-hand corner of the page.
6. Update the fields.
7. Enter the challenge code.
8. Click Save .
Related information
Change Your Password on page 33
Change Your Password-reset Question on page 34
Reset Your Password on page 34
Change Your Contact Information on page 35

3.10.2 Change Your Password


Use this procedure if you know your password and want to change it. If you don't remember your
password, then see Reset Your Password on page 34.
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Click Personal Info > Identity.
5. Click > change password .
6. Enter your original password and create a new password according to the rules displayed.
7. Click OK .
Related information
Change Your Personal Data on page 33
Change Your Contact Information on page 35
Change Your Password-reset Question on page 34

24 August 2018 33
Identity Management User Tasks
Online Help

Manage 2-step Verification on page 39

3.10.3 Change Your Password-reset Question


Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Click Personal Info > Identity.
5. Click > change question .
6. Choose if you want a password-reset question.
If you choose not to have one, click "I don't want a password reset question" and then go to
step 9.
If you choose to have one, click "I want to create a new Question and answer" and continue
with the next step.
7. Select "I want to create a new Question and answer".
8. Enter your new password-reset question and your answer.
9. Enter the challenge code.
10. Click Submit .
A confirmation window appears.
11. Click OK .
Related information
Change Your Password on page 33

3.10.4 Reset Your Password


A user must reset their own password.
About this task
You must reset your password in the following cases:
1. If you have forgotten your password.
2. If your password has expired.
Procedure
1. Log in to mySWIFT.
2. Click Access mySWIFT.
3. Click the Forgot password? link.
4. On the CHANGE YOUR PASSWORD window, enter the e-mail address with which you
registered.
5. Enter the Challenge Code.
6. Click Submit .
Password reset instructions are sent to your email address.

24 August 2018 34
Identity Management User Tasks
Online Help

7. Check your e-mail for the password reset link. The e-mail has the subject line "Reset Password
User Notification".
8. Click the link on the e-mail to reset/change password.
9. Enter a new password, confirm the password, enter the challenge code, then click Next .
10. Answer password reset question and click OK .
Note If you do not remember the answer to the password reset question, contact your
swift.com administrator to remove the password reset question.
The administrator can remove this question by following the procedure in the
section Remove the Password Reset Question on page 51.
If you ask this question to be removed, then you will need to start the reset
password procedure from the beginning again.
11. Enter 2-step Verification Code and click OK .
Note If you are not able to receive the 2-step verification code for whatever reason, then
contact your swift.com administrator to disable 2-step verification.
The administrator can disable this 2-step verification by following the procedure in
the section Disable 2-step Verification on page 42.
12. You will receive a confirmation e-mail with the subject line "Password Change Notification".
You can now log in to swift.com with the new password you entered.
Related information
Change Your Password-reset Question on page 34

3.10.5 Change Your Contact Information


You can accept to be contacted by SWIFT by phone for marketing campaigns by selecting Yes.
Otherwise, select No.
About this task
On the Personal Info > Identity page
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Click Personal Info > Identity.
5. Click Edit on the top right-hand corner of the page.
6. In the section Contact Information, update the fields.
7. Click Save .
Related information
Change Your Personal Data on page 33
Change Your Password on page 33

24 August 2018 35
Identity Management User Tasks
Online Help

3.11 Notifications

3.11.1 Subscribe to a Notification


If you want more information on a certain notification, hover the cursor over the ? next to it. You
can request the sending of a test SMS to check if the SMS notifications service is available to you.
This is only possible if you have provided a mobile number in your contact information, see Change
Your Contact Information on page 35.
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Navigate to the Personal Info > Notifications page.
Your list of notifications appears as in the example below.

5. Click Edit at the top right-hand side of the page.


6. You can request to be notified of its operational status by e-mail and/or by SMS.
Click the drop-down arrow and select the type of notification. You can choose either All
severities or Service Issues Only.
Click Save and your request is automatically recorded at SWIFT.
Related information
Unsubscribe from a Notification on page 36
Subscribe to a Newsletter on page 37
Unsubscribe from a Newsletter on page 37

3.11.2 Unsubscribe from a Notification


If you want more information on a certain notification, hover the cursor over the ? next to it. You
can request the sending of a test SMS to check if the SMS notifications service is available to you.
This is only possible if you have provided a mobile number in your Registration Info on page 30.
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.

24 August 2018 36
Identity Management User Tasks
Online Help

4. Navigate to the Personal Info > Notifications page.


Your list of notifications appears as in the example below.

5. To stop receiving a notification, click the drop-down arrow and select None.
6. Click Save and your request is automatically recorded at SWIFT.
Related information
Subscribe to a Notification on page 36
Subscribe to a Newsletter on page 37
Unsubscribe from a Newsletter on page 37

3.12 Newsletters

3.12.1 Subscribe to a Newsletter


If you want more information on a certain newsletter, hover the cursor over the ? next to it.
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Navigate to Personal Info > Newsletters.
A list of all newsletters appears with a status of either Subscribe or Unsubscribe.
5. Click Subscribe for each newsletter that you want to subscribe to.
A message appears to confirm the newsletter that you have subscribed to.
6. Close the confirmation box.
Subscribe changes to Unsubscribe to indicate that you will now receive the newsletter.
Related information
Subscribe to a Notification on page 36
Unsubscribe from a Notification on page 36
Unsubscribe from a Newsletter on page 37

3.12.2 Unsubscribe from a Newsletter


If you want more information on a certain newsletter, hover the cursor over the ? next to it.
Procedure
1. Log in to mySWIFT.

24 August 2018 37
Identity Management User Tasks
Online Help

2. Click My tools.
3. Select myProfile.
4. Navigate to Personal Info > Newsletters.
A list of all newsletters appears with a status of either Subscribe or Unsubscribe.
5. Click Unsubscribe for each newsletter that you want to unsubscribe from.
A message appears to confirm that you are unsubscribed from that particular newsletter.
6. Close the confirmation box.
Unsubscribe changes to Subscribe to indicate that you will no longer receive the newsletter.
Related information
Subscribe to a Notification on page 36
Unsubscribe from a Notification on page 36
Subscribe to a Newsletter on page 37

3.13 2-step Verification

3.13.1 Set Up 2-step Verification


Before you begin
To set up security code delivery to your mobile phone, you must set up at least one mobile phone
number in your personal info.
Procedure
1. Log in to mySWIFT.
2. If you have not set up the 2-step verfication feature, then the Enable 2-step verification
window appears after login. Click Set up 2-step verification .
The ENABLE 2-STEP VERIFICATION window appears.
3. To enable a security code delivery channel, click the Enable link of the channel that you want to
enable.
You will receive a confirmation email for each channel that you enable.

Delivery channel Description

Email address Enable this channel to receive verification codes as email messages
to your e-mail inbox.

SMS Enable this channel to receive verification codes as SMS messages


to your mobile phone.

Voice message to mobile phone Enable this channel to receive verification codes as voice messages
to your mobile phone.

Voice message to landline Enable this channel to receive verification codes as voicemail
messages to your landline.

24 August 2018 38
Identity Management User Tasks
Online Help

4. If prompted, then follow the procedure to confirm the mobile number used for delivery of the
verification codes.
5. If you enable multiple delivery channels, then you must indicate your preferred channel.
Note SWIFT always uses the preferred delivery channel, unless you specify another
channel when you log on. The alternate channel is used only for that session: the
next time you log on, you will receive your security code via the preferred channel
again.

3.13.2 Manage 2-step Verification


Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Navigate to Personal Info > Identity.
5. Under the Login information section, click Manage 2-step verification .
The Manage 2-step verification settings window appears.
6. Manage the security code delivery channels. To change the status of a delivery channel, click
the Enable link or Disable link of the channel. To change the preferred delivery channel, click
the option button of the delivery channel you prefer.
You will receive a confirmation email for each channel that you enable.

Delivery channel Description

Email address Enable this channel to receive verification codes as email


messages to your e-mail inbox.

text messages (SMS) Enable this channel to receive verification codes as SMS
messages to your mobile phone.

Voice message to mobile phone Enable this channel to receive verification codes as voicemail
messages to your mobile phone.

Voice message to landline Enable this channel to receive verification codes as voicemail
messages to your landline.

7. If prompted, then follow the procedure to confirm the mobile number used for delivery of the
verification codes.
8. If you enable multiple delivery channels, then you must indicate your preferred channel.
Note SWIFT always uses the preferred delivery channel, unless you specify another
channel when you log on. This alternate channel is used only for that session: the
next time you log log on, you will receive your verification code via the default
channel again.

24 August 2018 39
Identity Management User Tasks
Online Help

3.13.3 Log in with 2-step Verification


Procedure
1. Log in with your swift.com user name and password.
The 2-step verification window appears.

2. Provide the verification code sent to your preferred delivery channel.


If you do not have access to your preferred channel, for example if your preferred channel is e-
mail and you do not have access to your computer, then select the link to another enabled
channel in the bottom-left corner of the window, as shown in the image above. This delivery
channel will be used for this session only.
3. Optionally select the check box Trust my device. We won't ask you for a code again in the
next 30 days on this device.

3.13.4 Reset 2-step Verification


If you no longer can use a 2-step verification channel, then use another 2-step verification channel
to log in and disable the 2-step verification channel that you can no longer use. See Log in with 2-
step Verification on page 40 and Manage 2-step Verification on page 39.
However, if you can no longer log in with 2-step verification at all, then you must reset your 2-step
verification. The reset procedure requires an approval of the swift.com administrator.
Procedure
1. Log in with your swift.com user name and password.
The 2-step verification window appears.

24 August 2018 40
Identity Management User Tasks
Online Help

2. Click the Reset 2-step Verification link as shown in the image above.
The following message appears:

3. Click Confirm to send out your request for 2-step verification revocation.
4. A reset request confirmation message appears.
Your account is reset when a swift.com administrator in your institution approves your reset
request. Until the reset request has been approved, the 2-step verification window states that
the reset approval is pending.

3.13.5 Un-trust 2-step Verification Devices


When you trust a 2-step verification device, you are not challenged with a one-time password for 30
days for that device. You must un-trust a 2-step verification device that has been compromised, for
example when the mobile phone you use to receive the 2-step verification codes has been stolen or
lost.
Depending on the type of security issue, you may also consider to completely disable 2-step
verification for a single device (see Manage 2-step Verification on page 39). If you no longer have
access to your 2-step verification credentials, then you must reset 2-step verification. See Reset 2-
step Verification on page 40.
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
The Manage Your Profile window opens.
4. Click the Personal Info tab.
5. Click the Identity tab.
6. Under Login information > 2-step verification, click Un-trust 2-step verification devices.
A confirmation pop-up appears.
7. Click OK.
Your devices are untrusted. At the next login you will receive a verification code again.

24 August 2018 41
Identity Management User Tasks
Online Help

3.13.6 Disable 2-step Verification


This topic explains to swift.com administrators how to disable 2-step verification for a user, if the
user cannot receive e-mails from swift.com.
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Navigate to Search Users.
5. Enter the user criteria and click Search .
6. Click the e-mail address of the user.
7. Navigate to Personal Info > Identity.
8. Under Login information, click Reset 2-step verification.
The user will not be asked to enter the 2-step verification code. Instead, the system will prompt to
set up a new 2-step verification because 2-step verification is part of the login process.

24 August 2018 42
Identity Management Administrator Tasks
Online Help

4 Administrator Tasks
The tasks performed in this chapter can only be performed by someone with an administrator role.
The different types of administrators are described in Administrator Types on page 43.

4.1 Administrator Types


swift.com administrator
The role of the swift.com administrator is, on www.swift.com, to approve registration requests of
new users, to manage the profile (roles) of the registered users within their institution, and to grant
or to reject access to specific applications.
A swift.com administrator has the swift.com administrator contact role. For more information, see
SWIFT.com administrator on page 83.

SWIFTRef user administrator


The role of the SWIFTRef user administrator is similar to the role of the swift.com administrator, yet
limited in scope to the management of user access to SWIFTRef products and SWIFTRef
contracts.
A SWIFTRef user administrator has the SWIFTRef user administrator contact role. For more
information, see SWIFTRef user administrator on page 82.

Watch user administrator


The role of the Watch administrator is similar to the role of the swift.com administrator, yet limited in
scope to the management of user access to Watch products and Watch contracts.
A Watch user administrator has the Watch user administrator contact role. For more information,
see Watch User Administrator on page 83.

SEPAIO Administrator
The role of the SEPAIO administrator is similar to the role of the swift.com administrator, yet limited
in scope to the management of user access to SEPAIO. See SEPAIO Administrator on page 81.

Related information
Security Contact Roles on page 81
Administrator Tasks on page 43

4.2 User Management

4.2.1 User Profiles


The normal user profile
A normal user profile doesn't contain any critical roles.

The important user profile


An important user profile contains at least one important role.

24 August 2018 43
Identity Management Administrator Tasks
Online Help

SWIFT considers the following roles as important:


• KYC Approver
• KYC Granter
• KYC Publisher
• KYC Qualifier
• KYC Requester
• KYC SWIFT Profile Granter
• KYC SWIFT Profile Qualifier
• KYC SWIFT Profile Requester
• KYC SWIFT Profile Viewer
• KYC Submitter
• KYC Viewer
• Swift Operational HD (Level 1) Backup
• SWIFT Operational Mgr (Level 2) Primary
• SWIFT Operational Mgr (Level 2) Backup
• SWIFT Incident Manager (Level 3) Primary
• SWIFT Incident Manager (Level 3) Backup
• SWIFT Executive (Level 4) Primary
• SWIFT Executive (Level 4) Backup
• SWIFT Service Manager Primary
• SWIFT Service Manager Backup
For role information, see Business Roles on page 84 and Premium Plus Contact Roles on page
89

The critical user profile


A critical user profile contains at least one critical role.
SWIFT considers the following roles as critical:
• 3SKey User Administrator
• Alliance Lite security officer
• Fin copy business officer
• KYC Administrator
• Primary Business Contact
• SWIFTAlliance LSO
• SWIFTAlliance RSO
• SWIFTNet copy Business Officer
• SWIFTNet ITB Security Officer
• SWIFTNet Live Security Officer
• SWIFTRef commercial team
• SEPAIO Administrator
• swift.com administrator

24 August 2018 44
Identity Management Administrator Tasks
Online Help

For role information, see Contact Role Descriptions on page 81

User profile management rules


Category Normal user profile Important user profile Critical user profile

expiry warning SWIFT sends an email 3 SWIFT sends an email 3 SWIFT sends an email 3
emails months before expiry, 2 weeks before expiry, 2 weeks before expiry, 2
months before expiry, 1 weeks before expiry, 1 week weeks before expiry, 1 week
month before expiry. before expiry. before expiry.

profile expiry swift.com administrators are swift.com administrators are swift.com administrators are
informed by email when a informed by email when an informed by email when a
normal user profile within important user profile within critical user profile within
their scope has expired. their scope has expired. The their scope has expired. The
email contains the list of email contains the list of
important roles of the user critical roles of the user
profile. profile.

profile disabling or Expired profiles are Expired profiles are never Expired profiles are never
deleting disabled: use the recovery disabled or deleted. disabled or deleted.
procedure to enable the
Administrators receive a Administrators must remove
user again. See Recover a
warning when they attempt the role from the profile first,
User on page 54.
to delete an important user before they can delete the
Unrecovered profiles are profile. user profile.
permanently deleted 6
months after profile expiry.

4.2.2 Search for a User


The search functionality finds registered users only.
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Click the Search Users tab.
5. Select the search criteria and click Search . You can add more criteria by clicking Add .

Search criterion Description

Email address The email address

BIC/PIC The Business Identifier Code or Partner Identifier Code

Name First name or last name

Institution name The officially registered name of the institution

Customer # The customer number

24 August 2018 45
Identity Management Administrator Tasks
Online Help

Search criterion Description

Registration # Also known as Support number in Profiles > Registration Info

Contact Roles Select a contact role in the drop-down menu

Application Accesses Select an application in the drop-down menu

Profile expires Helps locate expired user profiles. Select Before or After in the
drop-down menu and a date

Last login date Helps locate users who have not logged in since a while. Select
Before or After in the drop-down menu and a date

6. The list of users appears. To access a user's profile, click their e-mail address.
7. Optionally export the list of users as a report. This report could then for example be uploaded
as input (CSV file) for the bulk deletion of user profiles.
1. Click the Export all to Excel link at the bottom right of the page.
2. In the window that pops up, select the sections to be included in the report.

3. Click Generate report .

24 August 2018 46
Identity Management Administrator Tasks
Online Help

4.2.3 Assign A Contact Role to a User


A swift.com administrator can assign a contact role to a user without their prior request.
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Click the Search Users tab.
5. Locate the user for whom you want to assign a role. Enter the search criteria and click Search .
Optionally click Add to add more search criteria.
6. Click the user's e-mail address to access their profile.
A message appears and informs you that you are viewing the profile of another user.

7. Select Profiles > Contact Roles.


8. Click Edit on the top right-hand corner of the page.
9. Select the box next to a contact role to assign the user as primary contact for this role.
10. Click Save on the top right-hand corner of the page.
11. A pop-up message confirms that the selected roles have been updated.
12. An e-mail is sent to the user to inform them that their profile has been updated.
Related information
Contact Role Descriptions on page 81
Assign Application Access to a User on page 47

4.2.4 Assign Application Access to a User


A swift.com administrator can assign access to an application without the user's prior request. For a
list of application descriptions, see Application Descriptions on page 71.
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Locate the user profile that you want to change. Enter the search criteria and click Search .
Optionally click Add to add more search criteria.
The filtered list of users appears.

24 August 2018 47
Identity Management Administrator Tasks
Online Help

5. Click the user's e-mail address to access their profile.


A message appears and informs you that you are viewing the profile of another user.

6. Select Profiles > Request Accesses.


7. Click Edit on the top right-hand corner of the Request Accesses list.
8. Select the box next to the application for which you want to assign access.
9. Click Save .

4.2.5 Filter User Requests


By default, the system displays all user requests for the last month that are pending approval. You
can change the filter criteria to suit your needs.
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Navigate to Admin Functions.
5. To filter the list of requests, specify an e-mail address, a request status and a period of time.
6. Click Filter .

4.2.6 Approve a Pending Request


About this task

Important For security reasons this function is subject to 4-eyes approval. After approval by one
administrator, a message will be generated informing the other administrator and
requesting their approval.
A user can have only one request open at any one time. The open request must be
approved or rejected before the same user can submit another request.
Both administrators must approve using the following procedure.

Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Navigate to Admin Functions.
5. Click Requests .
6. Search for the e-mail address of the user.

24 August 2018 48
Identity Management Administrator Tasks
Online Help

7. Locate the pending request that you want to approve. By default, the system displays all user
requests for the last month that are pending approval. Change the filter criteria to further suit
your needs. See Filter User Requests on page 48.
8. Click the Ticket number of the pending request you want to approve.
9. Click Accept .

4.2.7 Reject a Pending Request


By default, the system displays all user requests for the last month that are pending approval.
Change the filter criteria to further suit your needs.
About this task

Important For security reasons, this rejection counts towards an upper limit of rejections per
user. If a user is rejected three times, then all their roles, except for critical and
important roles, are disabled.
A user can have only one request open at any one time. The open request must be
approved or rejected before the same user can submit another request.

Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Navigate to Admin Functions.
5. Click Requests .
6. Search for the e-mail address of the user.
7. Locate the pending request that you want to reject. By default, the system displays all user
requests for the last month that are pending approval. Change the filter criteria to further suit
your needs. See Filter User Requests on page 48.
8. Click the Ticket number of the pending request that you want to reject.
9. Click Reject .

Important When you reject a user request the institution to which the user belongs is checked to
see if a whitelist has been enabled. If no whitelist is configured, then the administrator
gets a message that rejections can be avoided by creating a whitelist and is then
invited to configure one.
As long as a user request is pending, the user will not be able to make another
request until the pending request has been approved or rejected by an administrator.
If the user request is rejected three times then, for security reasons, all their roles
(except for critical and important roles) are disabled.

4.2.8 Edit a User's Profile


Before you begin
Note If you are a Security Officer it is not possible to change your e-mail address this way.
Please contact SWIFT Support.

24 August 2018 49
Identity Management Administrator Tasks
Online Help

Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Go to the Personal Info tab.
5. Click the Identity tab.
6. Click Edit, at the top right.
7. Enter your changes.
8. Enter the Challenge code.
9. Click Save .
Note An e-mail is sent to the swift.com administrator of your institution for approval. The
swift.com administrators can then review the changes, adjust the requested
service access, and approve or reject your changes.
Note Due to a new security requirement, the following characters are no longer
accepted for the First Name, Last Name, or Place of Birth fields: < > * - / = : # \ ;
^

4.2.9 Add or Change an Employee Number


Only an administrator can add or change an employee number.
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Click the Search Users tab.
5. Locate the user for whom you want to add or change the employee number. Enter the search
criteria and click Search . Optionally click Add to add more search criteria.
6. Click the user's e-mail address to access their profile.
A message appears and informs you that you are viewing the profile of another user.

7. Navigate to the Profiles > Registration Info page.


8. Click Edit on the top right-hand corner of the page.
9. Update the Employee Number field.
This number is only unique within your institution.
10. Click Save .

24 August 2018 50
Identity Management Administrator Tasks
Online Help

4.2.10 Define the Password Expiration Period


Description
Note This task can only be performed by a swift.com administrator.
The password policy enables you, as an administrator, to define a password expiration period for
each institution that you administer.
You manage this function through Admin Functions > Password Policy.

1. Select the institution from the drop down list for which you would like to apply a password policy.
2. Select the password expiration period that you would like to apply to the institution.
Currently there is a choice of:
• 3 months (recommended)
• 6 months
• 1 year
• 2 years
• No mandatory password expiration policy defined

Important Important If you choose a password policy that is more restrictive (shorter) than the
current one, then all current passwords are restricted to the new policy.

Important Important If you choose a password policy that is less restrictive (longer) than the
current one, then the change will only apply to new users. Current passwords are
unaffected.

4.2.11 Remove the Password Reset Question


This topic explains to swift.com administrators how to remove a user's password reset question.
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Navigate to Search Users.
5. Enter the user criteria and click Search .

24 August 2018 51
Identity Management Administrator Tasks
Online Help

6. Click the e-mail address of the user.


7. Navigate to Personal Info > Identity.
8. Under Change question choose "I don't want a password reset question".
9. Enter the challenge code and click Submit .
The user will not be asked to answer the password reset question when changing the password.

4.2.12 Add a swift.com Administrator Role to a User


A swift.com administrator can assign the swift.com administrator contact role to another registered
user.
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Click the Search Users tab.
5. Locate the user for whom you want to assign the swift.com administrator contact role. Enter the
search criteria and click Search . Optionally click Add to add more search criteria.
6. Click the user's e-mail address to access their profile.
A message appears and informs you that you are viewing the profile of another user.

7. Select Profiles > Contact Roles.


8. Click Edit at the top right-hand corner of the page.
9. Select the box next to the swift.com Administrator contact role to assign the user as primary
contact for this role.
10. Click Save at the top right-hand corner of the page.
11. A pop-up message confirms that the selected roles have been updated.
12. An e-mail is sent to the user to inform them that their profile has been updated.

4.2.13 Remove the swift.com Administrator Role from a User


A swift.com administrator can remove the swift.com administrator contact role from another
registered user.
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Click the Search Users tab.

24 August 2018 52
Identity Management Administrator Tasks
Online Help

5. Type the e-mail address of the swift.com administrator from whom you would like to remove this
role.
6. Click Search .
7. Click on the e-mail address of the user.
8. Click on the Contact Roles tab.
9. Click Edit , which is located at the top-right corner of the page.
10. Under Security Contact Roles, clear the checkbox next to swift.com Administrator.
11. Click Save , which is located at the top-right corner of the page.
A confirmation message appears.

4.2.14 Delete a User


When a user no longer requires access to the online services, you can delete their user profile.
Deleted users cannot access the applications of swift.com on behalf of your institution, but are still
listed in the user database of swift.com. If a deleted user needs to access the online services
again, then you can recover the user profile.
It is good practice to remove the users that no longer need access to swift.com. To remove a user,
see Remove a User on page 54.
If a group of users no longer require access to the online services, then consider bulk deleting
users. See Bulk Delete Users on page 53.
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Navigate to Admin Functions > Delete Users.
5. Enter the search criteria and click Search . You can add more criteria by clicking Add .
6. The list of users appears. Select the option box next to each user that you want to delete.
Note A lock means that you cannot delete this user. Hover the cursor over the lock to
get more information.
7. Click Delete .
Related information
Request Removal of an Application on page 26
Recover a User on page 54
Remove a User on page 54
Bulk Delete Users on page 53

4.2.15 Bulk Delete Users


Consider to "bulk delete" users when a group of users no longer require access to the online
services. Deleted users cannot access the applications of swift.com on behalf of your institution,
but are still listed in the user database of swift.com. If a deleted user needs to access the online
services again, then you can recover the user profile.
To delete a single user, see Delete a User on page 53.

24 August 2018 53
Identity Management Administrator Tasks
Online Help

Before you begin


The bulk delete tool requires as input a CSV file with the list of user profiles to delete. This CSV file
may only contain email addresses, separated by comma (,), semicolon (;) or whitespace characters
(space, character return, and tab).
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Navigate to Admin Functions > Delete Users.
5. Select Import email from CSV in the search criteria field.
Tip You can export search results to an Excel file and convert this Excel file to a CSV
file. See Search for a User on page 45.
6. Click Browse and navigate to the location of the CSV file.
7. Click Upload file . The list of user records displays.
Note The number of user records may be different from the number of records in the
CSV file: the system ignores e-mail addresses that it cannot find. It also displays
all profiles attached to a single e-mail address.
8. Review and select all relevant user records.
9. Click Delete .
The system deletes the user records.
Related information
Delete a User on page 53

4.2.16 Recover a User


Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Navigate to Admin Functions > Recover Users.
5. Enter the search criteria and click Search . You can add more criteria by clicking Add .
The list of deleted users appears.
6. Select the check box next to each user that you want to recover.
7. Click Recover deleted users .
Related information
Delete a User on page 53

4.2.17 Remove a User


Use this procedure to permanently remove a user profile. A removed user cannot be recovered.

24 August 2018 54
Identity Management Administrator Tasks
Online Help

Before you begin


You can only remove deleted users.
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Navigate to Admin Functions.
5. Click Remove Users.
6. Enter the search criteria and click Search .
Tip Click Add to add more criteria.
7. The list of deleted users appears. Select the option box next to each user that you want to
remove.
8. Click Remove users .

4.3 Standard Profiles


Concept
A standard profile is a template with a predefined set of rights. Rather than assign rights
individually to each user who creates an account on www.swift.com, as swift.com administrator you
can define standard profiles for a variety of roles. When a new user selects a standard profile
during the creation of their profile on www.swift.com, their profile will contain all rights associated
with the standard profile. For example, you could set up a standard profile for a SWIFTRef user.

Simplified trial access


To facilitate the administration of SWIFT trial software, a swift.com administrator may create a
standard profile, with the auto-approval for trial access check box selected. A new user who selects
this standard profile will be created on swift.com directly after approval of the request by the SWIFT
commercial team. The creation of this user will not require swift.com administrator approval of the
request.

4.3.1 Create a Standard Profile


Procedure
1. Select "Create an all-new Standard Profile".
2. Enter a name for new Standard Profile.
3. Grant or revoke accesses to applications for this profile.
4. Click Save .
The Standard Profile is saved and presented to any new user of your institution, during their
registration process.

24 August 2018 55
Identity Management Administrator Tasks
Online Help

4.3.2 Edit a Standard Profile


Procedure
1. Select "Edit or delete an existing Standard Profile".
2. Select an existing Standard Profile from the drop-down list.
3. Click Edit .
4. You can change the name of the Standard Profile.
You can also grant or revoke accesses to applications for this profile.
5. Click Save .

4.3.3 Delete a Standard Profile


Procedure
1. Select "Edit or delete an existing Standard Profile".
2. Select an existing Standard Profile from the drop-down list.
3. Click Delete .
4. Click Ok to confirm.
5. Click Save .

4.4 Reports

4.4.1 Generate an Audit Report


The audit report contains all audit records for all users in the scope of control of the administrator,
for the indicated time period. Alternatively, the audit report can be run for a single user. The
maximum audit reporting period is 6 months, if requested for all users. There is no time limit for
single-user audit reports.
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Navigate to Administration > Admin > Reports.
5. Click the triangle next to Audit Report to expand the selection.
6. Set the time range of audit report that you want to generate.
7. Optionally specify an e-mail address to create a report for only one user. If you do not specify
an e-mail address, then you generate the report for all the users.
8. Click Generate report .
9. Open or save the generated audit report as an Excel file.

24 August 2018 56
Identity Management Administrator Tasks
Online Help

4.4.2 Generate a Delegation Report


The delegation report provides an overview of all administrators and the delegations for the whole
group.
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Navigate to Administration > Admin > Reports.
5. Click the triangle next to Delegation Report to expand the selection.
6. Click Generate report .
7. Open or save the generated Excel file.

4.4.3 Generate a User Report


The user report lists the profiles of all users who are in your scope of control.
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Navigate to Administration > Admin > Reports.
5. Click the triangle next to User Report to expand the selection.
6. Click Generate report .
7. Open or save the generated Excel file.

4.5 Domain Names

4.5.1 Add a Domain Name for a BIC


As the administrator of the parent of a group, when you define a list of allowed domain names for
your own BIC, then this list applies for all the subsidiaries of your group, even for those subsidiaries
who did not delegate swift.com administration to you. As soon as you have defined this list, all your
local subsidiaries MUST use a list of allowed domain names.
Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Navigate to Admin Functions.
5. Select the BIC from the drop-down list.
6. Click Edit .

24 August 2018 57
Identity Management Administrator Tasks
Online Help

7. Add a domain name to the whitelist.


Note • The whitelist of a BIC is the combination of the whitelists of that BIC and its
group parent.
• An empty whitelist implies that all domains are allowed in the e-mail addresses
for registration of new users.
• Profiles of already registered users who registered with a domain name that is
not in this list, are not impacted.
8. Click Save Changes .

4.5.2 Remove a Domain Name for a BIC


Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Navigate to Admin Functions.
5. Enter the BIC or Customer Number and click Go .
6. Select the BIC from the drop-down list.
7. Click Edit .
8. Remove a domain name from the white list.
9. Click Save Changes .

4.6 BIC Management

4.6.1 Update a BIC


Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Navigate to Administration.
5. Click BIC Update .
6. Enter the BIC you want to update.
7. Enter the new BIC.
8. Click Next .
9. You can click Get list of impacted users if you want to get an Excel file with the users that will
have their BIC updated.
10. Click Finish to confirm the BIC update.
Related information
Delegate a BIC on page 59
Change the Delegation of a BIC on page 59

24 August 2018 58
Identity Management Administrator Tasks
Online Help

4.6.2 Delegate a BIC


Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Navigate to Administration.
5. Click Delegation .
6. Select from the first drop-down list the BIC for which you want to add delegation.
7. Select Change delegation.
8. Select from the second drop-down list the BIC you want to delegate user administration to.
9. Click Change delegation .
10. The Identity Management system sends an email to the swift.com administrators of the BIC
selected in step 8 on page 59. This email contains a link to click to accept the delegation.
When one swift.com administrator accepts the delegation, all swift.com administrators of that
institution are able to manage the profile of all users in your institution.
Related information
Undelegate a BIC on page 59
Change the Delegation of a BIC on page 59
Update a BIC on page 58

4.6.3 Undelegate a BIC


Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Navigate to Administration.
5. Click Delegation .
6. Enter the SoldTo number or select the BIC for which you want to remove a delegation.
7. Select Remove delegation.
8. Click Remove delegation .
Related information
Delegate a BIC on page 59
Change the Delegation of a BIC on page 59
Update a BIC on page 58

4.6.4 Change the Delegation of a BIC


Procedure
1. Log in to mySWIFT.

24 August 2018 59
Identity Management Administrator Tasks
Online Help

2. Click My tools.
3. Select myProfile.
4. Navigate to Administration.
5. Click Delegation .
6. Select from the first drop-down list the BIC for which you want to change a delegation.
7. Select Change delegation.
8. Select from the second drop-down list the BIC you want to delegate to.
9. Click Change delegation .
Related information
Delegate a BIC on page 59
Undelegate a BIC on page 59
Update a BIC on page 58

4.7 Dual Approval

4.7.1 Request a Dual Approval


Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Navigate to Administration.
5. Click Dual Approval.
6. Select the subsidiary institution for which you want to set up dual approval.
The system displays the name of the selected institution and the list of roles for which you can
set up dual approval.
7. Click Request Dual Approval next to the role that you want to request dual approval for.
The system displays a message that confirms your action and sends an e-mail that informs that
other swift.com administrators of this action.

4.7.2 Cancel a Dual Approval


Procedure
1. Log in to mySWIFT.
2. Click My tools.
3. Select myProfile.
4. Navigate to Administration.
5. Click Dual Approval.

24 August 2018 60
Identity Management Administrator Tasks
Online Help

6. Select the subsidiary institution for which you want to cancel dual approval.
The system displays the name of the selected institution and the list of roles for which you can
set up or cancel dual approval.
7. Click Request Cancellation next to the role for which you want to cancel dual approval.
The system displays a message that confirms your request. Dual approval will be cancelled
when another swift.com administrator approves the dual approval cancellation request.

4.8 SWIFTRef Administration

4.8.1 Specify the First SWIFTRef User Administrators For Your


Institution
Procedure
1. Use an e-form to order a SWIFTRef product and specify the e-mail address of the SWIFTRef
user administrator in the Administrators information section of the form.
2. SWIFT updates the profile for the specified users on swift.com and sends an e-mail to inform
these users that their profile on swift.com has been updated.

Important For all the SWIFTRef contracts ordered before 25 October 2014, SWIFT has
updated on www.swift.com the profiles of the users that already had the role of
SWIFTRef administrator on www.swiftrefdata.com.

3. Assign application access. See Assign Application Access to a User on page 47.

4.8.2 Grant or Revoke User Access to a SWIFTRef Product


Contract
Procedure
1. Select the contract for which you want to manage access.
2. Select the product for which you want to manage access.
3. In the Select user section of the window, enter the search criteria to find the users whom you
want to grant or revoke access for and click Search . You can add more criteria by clicking Add .
The Search results section displays all users that match the search criteria.
4. To grant user access to the product selected in step 2 on page 61, select the option box next to
the user's name in the Granted column.
To revoke user access to the product selected in step 2 on page 61, remove the option box in
the Granted column next to the user's name.
Tip To grant access at once to all users in the search results, select the Select all
option box in the Granted column header.
5. Click Save .
6. Click Confirm .
The system stores the changes and sends an e-mail to the users to inform them that their
profile on swift.com has been changed.

24 August 2018 61
Identity Management Administrator Tasks
Online Help

4.8.3 Grant or Revoke Access to Daily Update


Procedure
1. Select the contract for which you want to manage access.
2. Select the product for which you want to manage access to the daily update report information.
3. In the Select user section of the window, enter the search criteria to find the users whom you
want to grant or revoke access for and click Search . You can add more criteria by clicking Add .
The Search results section displays all users that match the search criteria.
4. To grant user access to the daily update of the product selected in step 2 on page 62, select the
option box next to the user's name in the Granted column.
To revoke user access to the daily update of the product selected in step 2 on page 62, remove
the option box in the Granted column next to the user's name.
Tip To grant access at once to all users in the search results, select the Select all
option box in the Granted column header.
5. Click Save .
6. Click Confirm .
The system stores the changes and sends an e-mail to the users to inform them that their
profile on swift.com has been changed.

4.8.4 Grant or Revoke Access to Download Automation


Procedure
1. Select the contract for which you want to manage access.
2. Select the product for which you want to manage access to download automation.
3. In the Select user section of the window, enter the search criteria to find the users whom you
want to grant or revoke access for and click Search . You can add more criteria by clicking Add .
The Search results section displays all users that match the search criteria.
Tip A search by contract number searches for users who already have access to
another contract for SWIFTRef products.
4. To grant user access to download automation of the product selected in step 2 on page 62,
select the option box next to the user's name in the Granted column.
To revoke user access to download automation of the product selected in step 2 on page 62,
remove the option box in the Granted column next to the user's name.

Important You can only grant download automation to two persons per contract.

5. Click Save .
6. Click Confirm .
The system stores the changes and sends an e-mail to the users to inform them that their
profile on swift.com has been changed.

24 August 2018 62
Identity Management Administrator Tasks
Online Help

4.8.5 Manage SWIFTRef Contract Details


Procedure
1. Select a contract from the drop-down list.
The system displays the contract owner information, which is the institution that has ordered the
products of this contract and the contract details.
2. Click Edit to edit the contract details.
The contract details are displayed.
3. Edit the passkey and domain name information.

4.8.6 Grant or Revoke SWIFTRef User Admin


Procedure
1. In the Search criteria section of the window, enter the search criteria to find the user in your
institution that you want to manage, then click Search . You can add more criteria by clicking
Add .

The Search results section displays all users that match the search criteria.
2. Select the user that you want to manage.
The Contracts of your institution box in the lower section displays all SWIFTRef contracts of
your institution that are currently not yet assigned to the selected user.
Tip A check mark in the Granted column means that the user already is a SWIFTRef
user administrator.
3. Manage the user's access to contracts. To grant this user the SWIFTRef user administrator
role, assign at least one contract of your institution. To do this, use the arrows to move at least
one contract from the Contracts of your institution box to the Contracts this user can
manage box.
To revoke the SWIFTRef user administrator role for this user, remove all contracts from the
Contracts this user can manage box.
4. Click Save .
The system stores the changes and sends an e-mail to the user to inform that their profile on
www.swift.com has been changed.

4.8.7 Generate a SWIFTRef User Report


Procedure
1. Select the contract number for which you want to generate the report.
2. Click Generate report .
The system creates the report for the specified contract.
3. When prompted, specify whether you want to open the report or save it.

24 August 2018 63
Identity Management Administrator Tasks
Online Help

4.9 Watch/Compliance Administration

4.9.1 Grant or Revoke User Access to a Watch Product


Contract
Procedure
1. Select the contract for which you want to manage access.
2. Select the product for which you want to manage access.
3. In the Select user section of the window, enter the search criteria to find the users whom you
want to grant or revoke access for and click Search . You can add more criteria by clicking Add .
The Search results section displays all users that match the search criteria.
4. To grant user access to the product selected in step 2 on page 64, select the option box next to
the user's name in the Granted column.
To revoke user access to the product selected in step 2 on page 64, remove the option box in
the Granted column next to the user's name.
Tip To grant access at once to all users in the search results, select the Select all
option box in the Granted column header.
5. Click Next .
A window appears with a summary of the requested changes.
6. Click Confirm .
The system stores the changes and sends an e-mail to the users to inform them that their
profile on swift.com has been updated.

4.9.2 Manage Watch User Restrictions


By default product access is granted to the whole BIC tree of an institution. Use this procedure to
manage the scope of access.
Procedure
1. Select the contract for which you want to manage access.
2. Select the Watch product for which you want to manage access.
3. In the Select user section of the window, enter search criteria to filter the list of users that have
access to the Watch product selected in step 2 on page 64 and click Search . Optionally click
Add to add more search criteria.

The Search results section displays all users that match the search criteria.
4. Select the option box next to the name of the users whom you want to manage.
Tip To manage restrictions for all users in the search results, select the Select all
option box in the header of the first column.

24 August 2018 64
Identity Management Administrator Tasks
Online Help

5. Click Next .
The Specify restrictions window appears.

6. Select the scope of the product access.


• Privilege
Each profile is linked to a set of privileges.
Privilege

Restriction type Description

Limited The standard set of privileges for the profile,


minus the export privilege

Standard The standard set of privileges for the profile

Advanced Not defined. Do not use.

• Institution

Restriction type Description

Unrestricted Access to all Institution BICs

Restricted white list Drag one or more BICs into the BICs of white list column. For the
products selected in step 2 on page 64, the users selected in step
4 on page 64 will have access only to data for the selected BICs.

Restricted black list Drag one or more BICs into the BICs of black list column. For the
products selected in step 2 on page 64, the users selected in step
4 on page 64 will have no access to data for the selected BICs.

• Message Type

Restriction type Description

Unrestricted Access to all message types.

24 August 2018 65
Identity Management Administrator Tasks
Online Help

Restriction type Description

Restricted white list Drag one or more message types into the
Message sub types of white list column. he
users selected in step 4 on page 64 will have
access only to data for the selected message
types.

Restricted black list Drag one or more BICs into the Message sub
types of black list column. For the products
selected in step 2 on page 64, the users selected
in step 4 on page 64 will have no access to data
for the selected message types.

• Currency

Restriction type Description

Unrestricted Access to all currencies.

Restricted white list Drag one or more currencies into the Message
sub types of white list column. he users
selected in step 4 on page 64 will have access
only to data for the selected currencies.

Restricted black list Drag one or more BICs into the Message sub
types of black list column. For the products
selected in step 2 on page 64, the users selected
in step 4 on page 64 will have no access to data
for the selected currencies.

• Country

Restriction type Description

Unrestricted Access to all countries.

Restricted white list Drag one or more countries into the Message
sub types of white list column. he users
selected in step 4 on page 64 will have access
only to data for the selected countries.

Restricted black list Drag one or more countries into the Message
sub types of black list column. For the products
selected in step 2 on page 64, the users selected
in step 4 on page 64 will have no access to data
for the selected countries.

• Folder

24 August 2018 66
Identity Management Administrator Tasks
Online Help

Drag one or more folders to the Accessible folders column. For the products selected in
step 2 on page 64, the users selected in step 4 on page 64 will have access to the folders
listed in the Accessible folders column.
• Hierarchy BIC8
Not implemented at this point.

7. Click Save .
The system stores the changes to the restrictions and sends an e-mail to the users to inform
them that their profile on swift.com has been changed.

4.9.3 Consult Watch Contract Details


Consult the details of a Watch product contract and display the profile of another user.
Procedure
1. Select a contract from the drop-down list.
The system displays the contract owner information, which is the institution that has ordered the
products of this contract and the contract details.
2. Click Edit to edit the contract details.
The contract details are displayed as well as the list of Watch product user admins and Watch
product users for this contract.
3. To view the profile of another Watch product user, click the business email of that user.
The profile of the selected Watch user appears. A box appears to inform that you are viewing
the profile of another person.

Profile of another person

4. To stop viewing the profile of another person, click Back to own profile .

4.9.4 Generate a Watch User Report


Procedure
1. Select the contract number for which you want to generate the report.
2. Click Generate report .
The system creates the report for the specified contract.
3. When prompted, specify whether you want to open the report or save it.

24 August 2018 67
Identity Management Administrator Tasks
Online Help

4.9.5 Grant or Revoke the Watch User Admin Role


Procedure
1. In the Search criteria section of the window, enter the search criteria to find the user in your
institution that you want to manage, then click Search . Optionally click Add to add more search
criteria.
The Search results section displays all users that match the search criteria.
Tip A check mark in the Granted column means that the user is a Watch product user
administrator.
2. Click the name of the user to select the user that you want to manage.
The Contracts of your institution box in the lower section displays all Watch product
contracts that are currently not yet assigned to the selected user.
3. Manage the user's access to contracts. To grant this user the Watch product user administrator
role, assign at least one contract of your institution. To do this, use the arrows to move at least
one contract from the Contracts of your institution box to the Contracts this user can
manage box.
To revoke the Watch user administrator role for this user, remove all contracts from the
Contracts this user can manage box.
4. Click Save .
The system stores the changes and sends an e-mail to the user to inform that their profile on
www.swift.com has been changed.

4.10 Manage your Whitelist


This section describes how to manage the whitelist feature.
When a person wants to register a profile for an institution identified by a BIC or customer number
the system checks whether an email domain whitelist has been configured for that institution.

Important If you configure a whitelist for a Parent BIC, then the whitelist that you define does not
only apply for registration to the Parent BIC but also for registration to all other BICs in
that group.

As an administrator, you can configure the whitelist for any institution that has delegated their
administration rights to you. Users not having an email address from the domain listed in your
whitelist cannot apply to be a member of your institution.
If you have created a whitelist, SWIFT recommends that you check your whitelist for the domains
registered there. See the section Configure your Whitelist on page 69 to configure your whitelist
for the domains you already have in use.
However, if you have not yet created a whitelist for your institution, we strongly recommend that you
create one. See the section Check (and create) your Whitelist on page 69.
Note An automatic notification message requesting that you create a whitelist if you have
not already done so will automatically display each time you reject a user registration
and no whitelist exists yet.

24 August 2018 68
Identity Management Administrator Tasks
Online Help

4.10.1 Check (and create) your Whitelist


Before you begin
Go to Admin Functions > Domain Names.

Procedure
1. This drop‑down list shows the list of BICs that have delegated the administrator function of
swift.com to your institution.
Select the BIC to see if it is whitelisted by either your Parent BIC (displayed in field 2) or the BIC
itself (displayed in field 3).
2. This is the list of domains for which your Parent BIC has granted access to the selected BIC.
In the example above, this means that all users from the BIC appearing in field 1 can request
access through your institution to “crdp.com” and “swift.com”.
3. This is the list of domains for which the BIC selected (in field 1) has granted access
authorisation.
In the example above, this means that all users in the institution appearing in field 1 can
request access through your institution to the sibos.com domain.
4. To add or remove domains to or from your whitelist, click Edit .
Continue with the section Configure your Whitelist on page 69.

4.10.2 Configure your Whitelist


Before you begin
Go to Admin Functions > Domain Names and check the list of domains in your whitelist (see the
section Check (and create) your Whitelist on page 69).

24 August 2018 69
Identity Management Administrator Tasks
Online Help

When you click Edit , a list of the domains appears at the bottom of the screen in edit mode.

You can remove a domain from the whitelist or add another domain to the whitelist by typing the
exact domain name in a free-text field.
Warning When you type the domain name, do not use the symbol (@) as part of the domain
name. Simply type the name of the domain as shown in the example above.
You can also use user reports to identify which domains are used by your institution(s). You can
configure the user list with the unique filters of the domain names. To do this, create a user report
and sort the data as follows:
Procedure
1. Highlight column A in the user report.
2. In Data > Data Tools, click Text to Columns.
The Convert Text to Columns Wizard launches.
3. Select the option Delimited. Click Next .
4. Select the delimiter as Tab. Click Next .
5. Choose the Column data format as General. Click Finish .
6. In Data > Sort & Filter, filter on the domain name in column A to select the domain values (for
example, firstname.lastname@DomainName).
This shows you the list of users and the roles they have for all the domains listed for your
institution(s). You can use this information to add and remove domains to and from your
whitelist.
What to do next
Recommended by SWIFT: To reduce the number of invalid registration requests, SWIFT
recommends that you create and maintain a whitelist for your institution and that you populate it
with domains that are used by your institution.

24 August 2018 70
Identity Management Application Descriptions
Online Help

5 Application Descriptions

5.1 Support Applications

5.1.1 Access to Support via Case Manager, phone or email


Definition
The online function that enables Support-registered customers to report a technical problem or
query to the SWIFT Customer Support Centre via different channels. For each new entry, support
staff assign a case number. Based on the evolution of the investigations, support staff provide
electronic updates. SWIFT maintains a complete overview of all cases with their current status
information. This information is available to customers. The facility is available at www.swift.com >
Support.
Granting access to the Case Manager application also automatically grants access to the
Knowledge Base. Removing access to the Case Manager application does not automatically
removes access to the Knowledge Base.
Case Manager access profiles

Profile Description

Unrestricted The user can do the following:

1. Use the swift.com tools for which the user has access.
2. See all cases in the Case Manager for the user's group.
3. Contact SWIFT Support directly via Case Manager, phone, or email.

Restricted The user can do the following:

1. Use the swift.com tools for which the user has access.
2. See only the cases in the Case Manager that the user reported, or for which
they are the delegated contact.
3. Contact SWIFT Support directly via Case Manager, phone, or email.

None The user can use the swift.com tools to which the user has access.

This user has no access to the Case Manager and cannot contact SWIFT
Support directly via email or phone.

5.1.2 myConfig
The tool myConfig enables SWIFT customers to view their configuration, license information, and
SWIFTNet service details. myConfig is available, free of charge.
Premium Plus and Premium Custom customers can also store specific information about their
institution to optimise the quality of support they will receive (for example, site names).
You can view a video about myConfig: General Overview. See also Frequently Asked Questions
about myConfig.

24 August 2018 71
Identity Management Application Descriptions
Online Help

5.1.3 Download Center


Allows you to download current software releases and updates. Each software release includes
related installation information.

5.1.4 Knowledge Base


The Knowledge Base is an online, searchable database for registered users.

Tips
Information in the Knowledge base is presented as an article called a tip, and has a unique
number. A tip provides information about:
• common problems with their solutions or workarounds
• status reports about known problems
• answers to frequently asked questions (FAQs)
• guidelines for troubleshooting
• best practices or suggestions
• technical documents
• broadcast information
Tips provide context information such as the product release, applicable platform, or the audience
(partner or customer).

24 August 2018 72
Identity Management Application Descriptions
Online Help

Search for knowledge base tips


You can search for tips using either the tip number or several words that describe the issue or
problem.

Popular tips
The page Popular tips lists up to 10 of the most-viewed tips for products where most cases were
reported. The Hot topics section provides shortcuts to important information, such as security
updates. This section is updated on a monthly basis.

Recent tips
The page Recent tips the tips that were created or updated recently. By default, you can view the
last 10 tips or you can use the dropdown menu to access the tips published in the last 7, 15, or 30
days.

Videos
The How-to videos are tips that provide step-by-step instructions in 2 to 3 minutes videos about
how to accomplish a task. You can pause and replay the videos at your convenience.
Note If the video does not meet your requirements, then refer to the other sources of
information that is available for support, such as the Documentation (User Handbook
Online) on page 74.
The information in the video is the latest available at the date of its production and may
change from time to time.

5.1.5 Leased Line Utilisation


Access to the monthly "Leased Line Utilisation Reports" in pdf and csv format for the ordered
Alliance Connect products.

5.1.6 Operational Status


SWIFT Operational Status allows you to get real-time information on the status of SWIFT's systems
and messaging services, as well as information on planned maintenance and business continuity
testing. For more information, see New Operational Status: User Guide (5021710).

24 August 2018 73
Identity Management Application Descriptions
Online Help

You can also subscribe to notifications about the operational status and check for planned
maintenance window (ADW).

5.1.7 Premium Plus documentation


SWIFT has designed Premium Plus for high-volume and highly resilient infrastructures that require
high availability and reliability. It provides high levels of proactive support and personalised incident
and crisis management.
Premium Plus & Custom support role to allow access to the "Premium Plus Service Document
Repository".

5.1.8 SIBOS CCM


The annual conference, exhibition, and networking event, that is organised by SWIFT. Sibos brings
SWIFT customers, solution providers, and SWIFT together to discuss critical issues. Shareholders
of the wider SWIFT community attend Sibos to be informed, to move the industry forward, and
perhaps most importantly, to expand business relationships and opportunities.

5.1.9 SWIFTNet Services Directory


A look-up tool that provides an online list of participants for each service that they have subscribed
to. The SWIFTNet Services Directory lists all users that participate in live or test Solutions, selected
Member-Administered Closed User Group, and market infrastructures. It also includes some
business information (for example, the role played by an institution in a particular Solution), and
operational information (for example, the Distinguished Names (DN) used for addressing) related to
the users of the services. SWIFT updates the Directory on a weekly basis. The Directory is
available free of charge.

5.1.10 T2S operational support


Enables full access to SWIFT's VAN Solution for T2S "Information Centre", available at
www.swift.com> Products & services > Industry initiatives > TARGET2 Securities, which helps
customers with news, documents and support information.

5.1.11 Training management


Allows you to consult your institution's SWIFT Training history through swift.com

5.1.12 Documentation (User Handbook Online)


SWIFT provides a collection of the contractual, technical, and operational documents for its
customers in Documentation (User Handbook Online).

Search for documentation


You can search for documentation using the title of the document, or using several words that
describe what you are looking for.
To search by title, use the A-Z list A-Z.

24 August 2018 74
Identity Management Application Descriptions
Online Help

To search using the filters, see the Filtered View

What's new in Documentation


To see recently published documentation, see What's New.

5.2 Security Applications


SWIFT's central application for the management of security officers and business officers. Secure
Channel enables registered security and business officers to submit and manage security officer
profiles, SWIFTNet offline interventions, PKI delegation and authorisation setting changes, and
FINCopy security-related changes. Secure Channel allows Alliance security officers to view
Alliance interface licence keys.

5.3 Ordering and Billing Applications

5.3.1 Billing Information


An access to the billing documents for your company and to your current account statement.

5.3.2 Configuration Changes


Allows you to access the e-forms for requesting configuration changes.

5.3.3 Edit Billing and Shipping Addresses


To manage your billing and shipping contacts. Click here to get more information.

5.3.4 Non-connected BIC ordering


Description to follow.

5.3.5 On-boarding
As a new customer joining SWIFT, allows you to go through the on-boarding process. Click here to
get more information.

5.3.6 Order Status


Allows you to track the status of your orders online. Click here to get more information.

5.3.7 Ordering
Allows you to order SWIFT products or services. Click here to get more information.

24 August 2018 75
Identity Management Application Descriptions
Online Help

5.3.8 Refdata ordering


Allows a SWIFTRef customer to use e-forms to order SWIFTRef data products.

5.3.9 Service Approval


Allows you to approve participation to closed user groups.

5.4 Licences

5.4.1 Accord
Enables real-time matching and exception handling for foreign exchange, money market, OTC
derivative, and commodity trade confirmations. Click here to get more information.

5.4.2 Developer Resource Centre


Allows you to get information, products and services to develop SWIFT compliant solutions. Also
provides access to sample code for software engineers developing and testing applications that
integrate with SWIFT. Click here to get more information.

5.4.3 EURO1/STEP1 Data Management


The ability to manage reachable BICs for EURO1/STEP1 participant BIC.

5.4.4 EURO1/STEP1 File Download


With this licence, users can download the monthly EURO1/STEP1 Directory files and Technical
Specifications.

5.4.5 EURO1/STEP1 Online Directory


The EURO1/STEP1 Directory includes EURO1/STEP1 participant banks and the reachable BICs
for each participant bank. The EURO1/STEP1 Directory allows the EURO1/STEP1 participants and
sub-participants (the EURO1/STEP1 banks) to list other banks (the reachable BICs) for which they
act as correspondents for payments sent through the EURO1/STEP1 system. For more
information, see the EURO1/STEP1 Directory User Guide.

5.4.6 Fixed Fee Reporting


A report for customers who have a fixed fee billing or invoicing agreement. Gives details about the
fees for traffic/messaging. Click here to get more information..

5.4.7 Know Your Customer


The registry that enables banks to share and access standardised, qualified data, and
documentation required for correspondent banking KYC obligations and customer due diligence

24 August 2018 76
Identity Management Application Descriptions
Online Help

requirements, using a secure online portal hosted by SWIFT. Banks can upload their own KYC
information to the Registry at no charge, and pay a yearly usage fee to access counterparty data.

5.4.8 MyStandards
A collaborative web application that is used to manage standards definitions and industry usage in
a more efficient way. MyStandards enables users to reduce time, effort, and risk to manage and
implement standards. The MyStandards service also includes the MyStandards Usage Guideline
Editor, an offline application that makes it possible for users to define and maintain their own usage
guidelines. MyStandards is hosted and managed by SWIFT and accessible by everyone across the
global financial community.

5.4.9 Remote Support


A payable low-cost option to the existing support packages (Standard Support, Standard Plus
Support, Premium Support, Premium Custom Support). With Remote Support, SWIFT enters your
network area to help diagnose and troubleshoot SWIFT interface issues.

5.4.10 SEPAIO API Access


This licence is automatically granted when the SEPAIO API User on page 88 business role is
granted.

5.4.11 SEPAIO Data Management


This licence is automatically granted when the SEPAIO Data Owner on page 88 business role is
granted.

5.4.12 SEPAIO Download


This licence is automatically granted when the SEPAIO Download User on page 88 business role
is granted.

5.4.13 SEPAIO Management Information


This licence is automatically granted when the SEPAIO Administrator on page 81 security contact
role is granted.

5.4.14 SWIFTRef Products


Provides access to SWIFTRef products on swiftrefdata.com

5.4.15 SWIFTRef EURO1/STEP1 Products


The ability to manage access rights for EURO1/STEP1 directory.

24 August 2018 77
Identity Management Application Descriptions
Online Help

5.4.16 Watch Products


Definition
The SWIFT portfolio of business intelligence solutions that enables financial institutions to analyse
the different aspects of their SWIFT business. Customers can monitor traffic flows, market shares,
messaging costs, and other SWIFT expenses. Watch comprises two product categories: Watch
Analytics and Watch Insights. You can find more information about Watch here.
Watch Analytics products

Product Definition

Watch Billing Analytics This is the Watch online analysis product that enables an institution to
analyse its total cost of ownership (TCO) in SWIFT. Watch Billing
Analytics provides all billing-related information, both network-based
(Network Based Invoice) and non-network-based, including credit notes
and invoices for all products and services over a 3-year period.

Compliance Analytics This is a new SWIFT service that helps banks monitor and address
financial crime risk by leveraging SWIFT message traffic data. It helps
identify possible anomalies in behaviour, unusual patterns or trends,
hidden relationships, or consistently high levels of activity with high-risk
countries and entities.

Watch Message Cost Analytics This is the Watch online analysis product that provides a consolidated
view of an institution's billed FIN, InterAct, and FileAct traffic. Such
information is available notably in terms of the average message price,
fixed charges, number of chargeable units, and other measures. An
institution can survey its messaging costs across multiple dimensions
(for example, time, geography, or business solution) with the goal to
reduce their message price, cross-charge costs internally or more
strategically improve the operational efficiency.

Watch Traffic Analytics This is the Watch online analysis product that provides an overview of
an institution's traffic. It enables institutions to analyse traffic by market,
message type, and region, and to track individual counterparties. The
objective is to understand how the institution's traffic is evolving, which
are its most important partners, and where its market share lies.

Watch Value Analytics This is the Watch online analysis product that provides an overview of
an institution's traffic and an overview of the content of some messages
(amount and currency) information. Customers can use this product to
examine their SWIFT messaging traffic in an interactive and intuitive
way.

Watch Securities Analytics This is the new Watch product that helps Securities players access their
SWIFT data centrally. Through a flexible query tool and visuals, they will
be able to monitor their global securities traffic on SWIFT, gain insights
on their business to identify opportunities for growth and benchmark
their services to ultimately improve quality and reduce costs and risks.

24 August 2018 78
Identity Management Application Descriptions
Online Help

Watch Insights products

Product Definition

CB - Network Management On-line access to an actionable, visual, and dynamic dashboard


covering counterparties flows for Payments (Category 1 and Category
2) Trade Finance flows (Category 4 and Category 7) at BIC8 level.
Customers gain value to Manage their correspondent network for
Payments & Trade Financed

CB - Payments On-line access to an actionable, visual, and dynamic dashboard


covering Payments flows (Category 1 and Category 2) at BIC8 level and
enabling to benchmark against the market. Customers gain value to
develop their footprint and portfolio in Payments

CB - Trade On-line access to an actionable, visual, and dynamic dashboard


covering Trade Finance flows (Category 4 and Category 7) at BIC8 level
and enabling to benchmark against the market. Customers gain value
to develop their footprint and portfolio in Trade Finance

Securities Securities Insights is a new Watch product providing on-line access to


actionable, visual, and dynamic dashboards, covering Securities traffic
on SWIFT. Securities players will be able to monitor their global
securities traffic on SWIFT, gain insights on their business to identify
opportunities for growth and benchmark their services to ultimately
improve quality and reduce costs and risks.

Watch Product Reports

Report Definition

Accord Report Accord Report provides monthly management reporting on trade


confirmation matching to Accord for Treasury users.

5.5 Board / eAGM Applications

5.5.1 AFC Board site


Specific closed user area.

5.5.2 Board Site


Specific closed user area.

5.5.3 SWIFT Chairpersons Site


The specific closed users area reserved for the NMG and UG Chairpersons of SWIFT.

24 August 2018 79
Identity Management Application Descriptions
Online Help

5.5.4 SWIFT EG Site


Specific closed user area.

5.5.5 Shareholder info and eAGM


Shareholding and General Meeting Information (invitation & proxy) are available to the contacts that
are registered under a shareholder BIC. Access to the application "Shareholder info and EAGM" is
automatically granted when the role of "Primary Business Contact" is granted."
If you are not the "Primary Business Contact", then you can access the app as follows:
1. Log in to mySWIFT.
2. Click My tools.
3. Click myProfile from the drop-down list.
4. Click the Profiles tab > Applications.
5. Find Shareholder info and eAGM in the list and click the link Go to app.

5.5.6 TPC Board Site


Specific closed user area.

24 August 2018 80
Identity Management Contact Role Descriptions
Online Help

6 Contact Role Descriptions

6.1 Security Contact Roles

6.1.1 Alliance Lite security officer


Alliance security officers renew Alliance Lite administrator USB tokens, manages secure code
cards, maintains Alliance Lite administrator information, and approves an Alliance Lite administrator
ID.

6.1.2 FINCopy business officer


A customer contact who represents the FINCopy or SWIFTNet Copy Central Institution towards
SWIFT. Business officers can request emergency FINCopy or SWIFTNet mode changes, and
emergency withdrawals of FINCopy or SWIFTNet participants.

6.1.3 ISAC CISO


This role is deprecated.

6.1.4 ISAC SOC 24x7


This role is deprecated.

6.1.5 SEPAIO Administrator


The person with this role can view and manage the SEPAIO roles for all of the users in their
SEPAIO group. SWIFT assigns the first two SEPAIO administrator roles for your institution as part
of the SEPAIO members group on-boarding.

6.1.6 SWIFTAlliance LSO


Alliance security officers use Secure Channel to view Alliance licence keys.

6.1.7 SWIFTAlliance RSO


Alliance security officers use Secure Channel to view Alliance licence keys.

6.1.8 SWIFTNet ITB security officer


Submits SWIFTNet offline intervention requests, maintains security officer information, manages
secure code cards, changes the authorisation setting, creates a non-repudiation re-verification
request, and manages SWIFTNet PKI delegation.

24 August 2018 81
Identity Management Contact Role Descriptions
Online Help

6.1.9 SWIFTNet Live security officer


Submits SWIFTNet offline intervention requests, maintains security officer information, manages
secure code cards, changes the authorisation setting, creates a non-repudiation re-verification
request, and manages SWIFTNet PKI delegation.

6.1.10 SWIFTNet copy Business officer


A customer contact who represents the SWIFTNet Copy central institution towards SWIFT.

6.1.11 SWIFTRef GPI Data Manager


The user with this role has the right to create and manage the gpi data records pertaining to their
institution. By default, access is granted for your institution's 8-character BIC code.
In addition, this user is granted access to the three components for managing gpi data as described
in the document the 3 components for managing gpi Data.

6.1.12 SWIFTRef Group Data Manager


The user with this role has the right to create and manage records pertaining to all the BICs within
the Financial Institution or group he belongs to. This means that a user with this role can create and
manage the records that apply to all the 8-character BICs that belong to the same hierarchy group
as the 8-character BIC linked to his swift.com account.
If you manage multiple 8-character BICs, then you will be attributed with this role.
However, if you have access to only your 8-character BIC, then you will be attributed only with the
role of SWIFTRef SSI Data Manager.
Note A user that does not have this role can only create and manage records that apply to
the 8-character BIC linked to his swift.com account.

6.1.13 SWIFTRef SSI Data Manager


The user with this role has the right to create and manage Standing Settlement Instructions (SSI)
on behalf of their institution. By default, access is granted for your institution's 8-character BIC
code.
If you have access to only your 8-character BIC, then you will be attributed only with this role.
However, if you manage multiple 8-character BICs, then you will be attributed with this role and the
role of SWIFTRef Group Data Manager in addition.

6.1.14 SWIFTRef user administrator


The SWIFTRef user Administrator is a key person in the institution subscribed to SWIFTRef
products. This person is responsible for the set-up of the user access to SWIFTRef products and
their update or replacement when applicable.

24 August 2018 82
Identity Management Contact Role Descriptions
Online Help

6.1.15 SWIFT.com administrator


This contact role allows you to manage users who register on swift.com who belong to your
institution and registered users of customers who have delegated their swift.com administration to
your institution.
As swift.com administrator you have the following responsibilities:
• Verify user identity: The swift.com administrator must ensure that the user who requests a
registration is a known representative of the institution and is authorised to access the online
services on www.swift.com on behalf of the institution that is mentioned in the request.
• Approve or reject registration requests.
• Grant or refuse access to specific services on www.swift.com.
• Grant the role of Alliance LSO or Alliance RSO to the institution's security officers.
• Deactivate or reactivate a user.
• Delete a user who no longer requires access to the online services.
• Assign other swift.com administrators.
• Delegate swift.com administration to another institution.
You must ensure that you always have at least two swift.com administrators in your institution. The
Identity Management application does not allow the removal of the swift.com administrator role
from a user if that would bring the total of swift.com administrators for your institution to less than
two. This restriction does not apply if your institution has delegated swift.com administration to
another SWIFT customer.

6.1.16 Watch User


A user of the SWIFT portfolio of business intelligence solutions that enables financial institutions to
analyse the different aspects of their SWIFT business. Customers can monitor traffic flows, market
shares, messaging costs, and other SWIFT expenses. Watch comprises two product categories:
Watch Analytics and Watch Insights. You can find more information on Watch products here.

6.1.17 Watch User Administrator


The Watch Administrator is a key person in the institution subscribed to Watch. This person is
responsible for the set-up of the user access to Watch products, the possible restrictions of the data
scope of these users and their update or replacement when applicable.

6.2 Ordering and Billing Contact Roles

6.2.1 SWIFT India RTGS


The SWIFT India RTGS role is used for users of SWIFT India customers, or for users or customers
in the process of joining SWIFT India RTGS.

24 August 2018 83
Identity Management Contact Role Descriptions
Online Help

6.2.2 Service approver


This role allows you as a service administrator to set up services, approve subscription to their
services and serve new customers.

6.3 Support Contact Roles

6.3.1 AMO Operational Contact


This is the Alliance Managed Operations contact person.

6.3.2 SWIFT Connectivity Email Contact


SWIFT may contact you for VPN box and Network related issues.

6.3.3 SWIFT interface (Alliance)


SWIFT may contact you for interface-related issues.

6.3.4 SWIFT Network Engineer


SWIFT may contact you for VPN box and network-related issues.

6.4 Business Roles

6.4.1 ACCORD Broker User


User of the Accord for Securities solution, who is able to view the data maintained by the Accord
central counterparty user.

6.4.2 ACCORD central counterparty user


User who is entitled to maintain static data for the CCPLink solution in Accord for securities: holiday
calendars and available places of settlement.

6.4.3 Board Member


Each Board Director automatically receives this profile. With this profile the Director is able to
access documents stored on the Board Secured Documents Services site.

6.4.4 Chair person

24 August 2018 84
Identity Management Contact Role Descriptions
Online Help

Each National Member Group Chairperson (NMG) and User Group Chairperson (UG) receives this
profile upon validation of his nomination at this post. With this profile the Chairperson is able to
access a closed user area reserved to the chairperson's community.

6.4.5 Chair person Secretary


The chair person secretary attends all meetings and ensures the safety and accuracy of all board
records by reviewing the board minutes. In case of absence of the board chair, chair-select and
vice chair, he assumes their responsibilities.

6.4.6 KYC Administrator


Manages users, roles, and configures group settings.

6.4.7 KYC Approver


Approves data and documents submitted by the Submitter (4-eyes mode).

6.4.8 KYC Granter


Authorises counterparties to access data and documents.

6.4.9 KYC Publisher


Publishes data and documents qualified by the Qualifier (4-eyes mode).

6.4.10 KYC Qualifier


Qualifies data and documents submitted by SWIFT before publication.

6.4.11 KYC Requester


Requests access to counterparty's data and documents. Refers to data granted by counterparties.

6.4.12 KYC Submitter


Contributes and manages data and documents.

6.4.13 KYC SWIFT Profile Granter


Grants access to own SWIFT Profile documents.

24 August 2018 85
Identity Management Contact Role Descriptions
Online Help

6.4.14 KYC SWIFT Profile Qualifier


Qualifies SWIFT Profile documents submitted by SWIFT before publication.

6.4.15 KYC SWIFT Profile Requester


Views and requests access to SWIFT Profile documents of counterparties.

6.4.16 KYC SWIFT Profile Viewer


Views SWIFT Profile documents of counterparties.

6.4.17 KYC System Administrator


SWIFT's technical system administrator.

6.4.18 KYC User Simulation


Allows a SWIFT user to see the same as a specific customer.

6.4.19 KYC Viewer


Views data and documents of counterparties.

6.4.20 LMS Administrator


The LMS Administrator assigns the Business Unit User Managers (LMS User Manager role).

6.4.21 LMS Compliance Professional


The LMS Compliance Professional has the Centre of Expertise role. This person deals with
regulation and compliance decisions.

6.4.22 LMS Manager


The LMS Manager performs the following functions:
• creates (manual) list definitions
• creates (new) manual list instances
• assesses post-processing statistics for automated lists
• review and publishes or rejects lists
• for list review tasks assigned to themselves, can add or remove their own comments

24 August 2018 86
Identity Management Contact Role Descriptions
Online Help

6.4.23 LMS Operator


The LMS Operator performs the following functions:
• Profile corrections of automated lists
• Profile management of manual lists (add/update/delete)
• Updates sub-task workflows (mark as done, ignore)

6.4.24 LMS Reviewer


The LMS Reviewer performs the following functions:
• reviews and reject profiles (except profiles corrected by themselves)
• Adds and removes their comments for Profile review tasks that are assigned to them

6.4.25 LMS User Manager


The LMS User Manager can invite swift.com users and assign business roles to these users.

6.4.26 Primary Business Contact


SWIFT may contact you for legal and shareholding matters related to SWIFT.

6.4.27 SA Administrator
Customer Security Attestation (KYC-SA): Performs group settings management in KYC-SA.

6.4.28 SA Approver
Customer Security Attestation (KYC-SA): Reviews and approves attestation data submitted by the
Submitter (4-eyes mode).
This role is managed through the KYC-SA Application.

6.4.29 SA Granter
Customer Security Attestation (KYC-SA): Authorises counterparties to access own entities’
attestation data.
This role is managed through the KYC-SA Application.

6.4.30 SA Requester
Customer Security Attestation (KYC-SA): Requests access to counterparty's attestation data.
Refers to data granted by counterparties.
This role is managed through the KYC-SA Application.

24 August 2018 87
Identity Management Contact Role Descriptions
Online Help

6.4.31 SA Submitter
Customer Security Attestation (KYC-SA): Creates and edits the attestation folder data.
This role is managed through the KYC-SA Application.

6.4.32 SA User Manager


Customer Security Attestation (KYC-SA): Perform user management forentities in group scope.
This role is managed through the KYC-SA Application.

6.4.33 SA Viewer
Customer Security Attestation (KYC-SA): Can view attestation data of counterparties who have
granted this access.
This role is managed through the KYC-SA Application.

6.4.34 SEPAIO API User


The person with this role can access the SEPAIO data from an application programming interface.
Any person registered with a SEPAIO institution can request this role without requiring swift.com
administrator approval.

6.4.35 SEPAIO Data Owner


The person with this role can manage BIC destinations for SEPA. This role is managed by the
SEPAIO Administrator.

6.4.36 SEPAIO Download User


The person with this role has the ability to download the SEPAIO directory file. Any person
registered with a SEPAIO institution can request this role, without requiring SEPAIO administrator
approval.

6.4.37 SWIFT training manager


The person with this role can consult your institution's SWIFT Training history through swift.com.

6.5 Support Admin Roles

6.5.1 Monitoring Data (Maintenance) Administrator

24 August 2018 88
Identity Management Contact Role Descriptions
Online Help

Premium Plus & Custom support role to allow in myConfig to add "Planned Maintenance info" and
allow changes to the monitoring for SNL, SnF queues and LTs.

6.5.2 Solution Provider KB User


Gives you access to the Knowledge Base for service providers.

6.6 Premium Plus Contact Roles

6.6.1 Level 1 Escalation Contact (Primary)


SWIFT may contact you as Level 1 escalation contact (Operational Helpdesk).
Premium Plus & Custom support role used in the escalation process.

6.6.2 Level 1 Escalation Contact (Back-up)


SWIFT may contact you as Back-up Level 1 escalation contact (Operational Helpdesk).
Premium Plus & Custom support role used in the escalation process.

6.6.3 Level 2 Escalation Contact (Primary)


SWIFT may contact you as Level 2 escalation contact (Operational Manager).
Premium Plus & Custom support role used in the escalation process.

6.6.4 Level 2 Escalation Contact (Back-up)


SWIFT may contact you as Back-up Level 2 escalation contact (Operational Manager).
Premium Plus & Custom support role used in the escalation process.

6.6.5 Level 3 Escalation Contact (Primary)


SWIFT may contact you as Level 3 escalation contact (Incident Manager).
Premium Plus & Custom support role used in the escalation process.

6.6.6 Level 3 Escalation Contact (Back-up)


SWIFT may contact you as Back-up Level 3 escalation contact (Incident Manager).
Premium Plus & Custom support role used in the escalation process.

24 August 2018 89
Identity Management Contact Role Descriptions
Online Help

6.6.7 Level 4 Escalation Contact (Primary)


SWIFT may contact you as Level 4 escalation contact (SWIFT Executive).
Premium Plus & Custom support role used in the escalation process.

6.6.8 Level 4 Escalation Contact (Back-up)


SWIFT may contact you as Back-up Level 4 escalation contact (SWIFT Executive).
Premium Plus & Custom support role used in the escalation process.

6.6.9 SWIFT service manager


SWIFT may contact you as Premium Plus Service Manager.
Premium Plus & Custom support role.

6.6.10 SWIFT service manager Back-up


SWIFT may contact you as Back-up Premium Plus Service Manager.
Premium Plus & Custom support role.

24 August 2018 90
Identity Management Legal Notices
Online Help

Legal Notices
Copyright
SWIFT © 2018. All rights reserved.

Restricted Distribution
Do not distribute this publication outside your organisation unless your subscription or order
expressly grants you that right, in which case ensure you comply with any other applicable
conditions.

Disclaimer
The information in this publication may change from time to time. You must always refer to the
latest available version.

Translations
The English version of SWIFT documentation is the only official and binding version.

Trademarks
SWIFT is the trade name of S.W.I.F.T. SCRL. The following are registered trademarks of SWIFT:
the SWIFT logo, SWIFT, SWIFTNet, Sibos, 3SKey, Innotribe, the Standards Forum logo,
MyStandards, and SWIFT Institute. Other product, service, or company names in this publication
are trade names, trademarks, or registered trademarks of their respective owners.

24 August 2018 91

You might also like