User registration – what’s going to change?
Generally, the registration and administration of the users is handled by the enterprises themselves.
The following procedure is used for registration:
User Manager
The user managers are created by the business units of the Deutsche Bundesbank.
- There may be one or several user managers per organisation.
- Task: Approval of registration or changes in user rights, creation or deletion of users, overview of existing users (= user administration).
User
- Task: Organisation self-registration and use of the required business topics.
The role of the user manager and the user can be performed by one person (e.g. in the case of smaller enterprises). For example, a user with a user ID can be both a user of the business topics and a user manager.
One registration per user (in an organisation) is required. A previously registered user may be granted access to other business topics at a later date.
Bundesbank-internal specialist administrators have access to user management and can, where necessary, create, block, delete, etc. user managers and users.
Can a user manager also be a regular user?
Yes, this is possible.
Can multiple user managers be designated for a single business area?
At least one user manager must be designated for each business area. However, it is recommended that several user managers be designated to each business area in order to prevent any disruptions to service in cases of absence (e.g. holidays or illness). There is no maximum number of user managers per organisation.
Can the user manager receive an overview of all his users?
User managers receive a complete overview if they are authorized for all business areas.
Authorisation of external users via alternative procedures
For organisations that cannot be checked against the commercial register (e.g. in the cases of organisations domiciled abroad, registered associations, individuals) alternative authorisation procedures will be possible. An alternative procedure is the definition of user managers by BBk business unit administrators.
Two-factor authentication (2FA) – How will this be implemented and what second factors will be permitted?
In addition to using a password, it is planned that two-factor authentication will be mandatory for logging into NExt.
Several variants of the second factor are offered (authenticator app, SMS and e-mail). For security reasons, the Bundesbank recommends using the authenticator app.
How many steps does the registration process have?
With the introduction of NExt, registration will be a two-step process. In the first step, the user managers will be designated by the Bundesbank’s business units. The user manager can then create, invite and manage users.
The Bundesbank may expand the registration process in the future.
What email address should be used for registration?
A user account should be assigned to a person. For this reason, it is recommended that a personal email address be used for a user account, rather than a functional email address.
Can NExt operators and specialist administrators change user rights and delete users?
Although it is planned that the Bundesbank will no longer be involved in the registration process, it will still be possible for the Bundesbank to provide support in user administration.
What are the rules for passwords in NExt?
To protect the user account, a secure password must contain at least ten characters. It must contain a capital letter, a lower case letter, a number and a special character. The password rules are shown at registration and when changing the password.
