Exelon MFA - Indirect customers

Introduction

Arcadia is introducing a secure and seamless update to how the Plug dashboard connects to your Exelon utility accounts. This guide walks you through a quick, one-time MFA (Multi-Factor Authentication) verification process that ensures your Exelon credentials remain active in the Plug dashboard without repeated MFA refresh prompts.

Once completed, Plug will securely maintain your utility sessions — allowing uninterrupted access to your billing and energy data.

This process takes just a few minutes to complete and follows the utmost security standards.

Step-by-Step Guide

For Indirect credentials

1. Login to Plug Dashboard
   • Go to the Plug dashboard.
   • Use your Plug credentials to log in.

2. Open Credential Management
   • From the main menu, select Manage your credentials.

3. Identify Credentials Requiring Verification
   • Click the ‘Select saved filter’ option and select MFA Refresh Required from the dropdown
   • You will be shown all credentials which need MFA re-authentication.

• Click Add row and select the first dropdown as ‘Provider name’, second dropdown as ‘Is equal to’, and third dropdown as ‘Required utility name’.
• Click Search to show MFA re-authentication required credentials for the selected utility.

• Click a username from the results, to open the Credential Details page.

4. Click the Generate link in Credential details page
   • Click the Generate update link shown in below screenshot, to create a shareable link which can be shared with the account-owner.
   • Click ‘Copy URL to clipboard’ to copy the Credential repair link. Share it with the account-owner, using which, they can complete MFA authentication.

5. Account-owner opens the Credential repair link
   • Account-owner sees the below page and is asked to enter the Username and Password for the credential 
   • They should fill the details for the credential and click Submit as shown

6. Selecting preferred MFA Method
   • Account-owner is shown available MFA methods for the credential. 
   • They can choose a preferred method to receive the one-time verification code.
   • Post selecting an option, they should click Send verification code to proceed.

7. Enter the Verification Code
   • They should check their selected MFA method for the security code sent by the utility and enter the security code as shown and click Submit.

1. Resend verification code: If they did not receive the MFA code on the selected MFA method within 60 seconds, they can click Resend verification code to send the code again to the selected MFA method
2. If they selected an MFA method (email / phone) and discover they no longer have access to it, the account owner can choose another MFA method from the previous screen. They can click Select another verification method to go back and select an alternate MFA method.

8. Success Confirmation
   • Post successful validation of the security code, the account owner is shown the below success message, confirming that the credential is successfully verified.
   • The credential status in Plug dashboard will change to Connected.

Expected Results

• Credential status detail changes from Multi factor authentication refresh required → Login and data discovery success.
• Plug begins fetching billing and usage data automatically.
• No further MFA action is required unless:
  1. MFA settings are changed on the utility’s website, or
  2. Account credentials are reset.

Edge cases: