CAMIS - SIMAC

PreAcc: http://catcpreaccpx.tc.gc.ca/Saf-Sec-Sur/2/camis-simac
Acceptance: https://etpacc.tc.gc.ca/camis_simac/
Production: https://etp.tc.gc.ca/camis-simac/

User Authentication in CAMIS is done through Entrust TruePass. Once the credentials for TruePass are entered, the application extracts some data from the request header passed from Entrust TruePass to CAMIS. Currently, CAMIS gets the users full name (not the user name) from the request header and through a select query, finds the user. If the user is found in the CAMIS database, the authentication process is complete.

More details:
LoginCheck method, which is a member of class clsCAMISUI, is called:

The following 2 lines get the user full name (last name , first name) from Entrust TruePass, passing to CAMIS through the request header:

And then through the following query, CAMIS finds the user (please note entrust_client_id is used in the where clause of the query):

If the above query returns a record, the user is found.

Future Improvement for CAMIS authentication process:
It is a more reliable approach to use username instead of actual user name. We have both username and actual user name (last name, first name) in CAMIS database, so instead of getting actual user name from Truepass request header, we can get username (header request is a key/value collection contaning information passed from Truepass to the application) and then modify above query (where clause) to get the user record in CAMIS database based on his/her username not the actual name, this way we can avoid the situations in which we enter the user’s full name with typo issue when creating a user in CAMIS, so even the user’s names has some typo, the application can still authenticate the user since it is based on the username not the user’s full name.

On eMER, the page is showing that all draft eMERs will be expired after 30 days

Open

However, this info is not correct because the draft eMERs will not be expired until 400 days

This value is set inside the table WA007_SETTING

Open

The following script is used to fix an ongoing issue with the document naming scheme. The issue is that eMER adds the date of submission in the file name, but CAMIS doesn’t expect it.

eMER does: {APPLICANT_NAME}-{SUBMISSION_DATE}-mer.[html|pdf]

CAMIS expects: {APPLICANT_NAME}--mer.html

Script to run:

User must be added into 2FA database before they are able to give eMER access to CAMEs
Create 2FA admin account for CAMIS

To log in to eMER, the user must have a valid cell-phone number in their CAMIS profile in order to receive the 2FA SMS code.

1. Log in to CAMIS and go to ADMIN → CAME Admin.

2. In the Select Existing CAME dropdown, find the user (sorted by last name).

3. Scroll down to the eMER section of the page and verify that profile is active & the number in the eMER Cell Phone # field is composed of only digits (no spaces even at the end, no special characters).

4. If there are no issues with the cell #, check the 2FA database logs for any errors.

   • TWOFA_USER@TTSXP18

5. Check the Twilio logs.
   Note: the following can provide access to Twilio: Michelle Le, Michelle Coelho, Alain Asgill, Peter Khouri.

   • Log in to Twilio.
     Note: After receiving access to Twilio, when you login for the first time you will need to activate
     your access to the TC Account from within Twilio. Look at the drop down above the Monitor tab
     
     Example:
     
     
     

     
     
     From the TC Account in Twilio:

   • Click on Monitor in the left-hand menu.

   • Go to Logs → Messaging.

   • Filter the logs by the cell # from step 3

      

6. If we can not find any error in above steps, and even if the eMer status is changed from Inactive to active and CAM still does not get the 2FA SMS code:

Email to a CAMIS administrator to keep a copy of original number, modify that phone number in CAMIS to the different one (fake ones), with the “active” eMER status, click update, then put back original phone number, click update. CAMIS administrator then will need to generate a new activation code. CAM will sign in eMER using the new activation code and he/she would receive 2FA SMS codes after that.