Login Help Center

Security management

If you're a Security Manager that oversees user access for CitiDirect, you can find dedicated guidance here on managing user profiles, resetting credentials, approving requests, and more.

As a Security Manager, you can add new users, modify existing user details, deactivate access, or unlock accounts. You can also assign authentication methods, reset credentials, and resend activation emails to help users securely log in to CitiDirect.

Reset a user password

Log in to CitiDirect and select Self Service from the main menu.
Under Client Administration Service, select Users & Entitlements.
Under Users, select All Users.
Select the user you want to reset.
Select Reset User and ask a 2^ndSecurity Manager to authorize the request.

Create a new user

Log in to CitiDirect and select Self Service from the main menu.
Under Client Administration Service, select Users & Entitlements.
Under Users, select Create.
Enter the required user information, including their: First Name, Last Name, Address, Country Code, Telephone, Email, and Mobile.
When assigning entitlements, you can either mirror entitlements of another user or add specific access profiles.
Select Submit and ask a 2^nd Security Manager to authorize the request.

Delete a user

Log in to CitiDirect and select Self Service from the main menu.
Under Client Administration Service, select Users & Entitlements.
Under Users, select All Users.
Select the user you'd like to delete.
Select Delete and ask a 2^nd Security Manager to authorize the request.

Authorize a user request raised by another Security Manager

Log in to CitiDirect and select Self Service from the main menu.
Under Client Administration Service, select Users & Entitlements.
Under Users, select All Users and Authorize to view a list of pending authorizations.
To review a user's setup before authorizing, select their user name. You can also review the description under the Action column.
Select the user request you want to authorize and click Authorize.

Access profiles define the specific CitiDirect features and functions a user can access. Security Managers are responsible for assigning and maintaining these profiles to ensure users only see and can access what's necessary for their role.

Create an access profile

Log in to CitiDirect and select Self Service from the main menu.
Under Client Administration Service, select Users & Entitlements.
Select Access Profiles and Create.
Copy from an existing access profile and edit the required parameters by clicking Copy from Existing or create a new access profile. To create a new access profile, select the desired subcategories under Available Services. Configure any applicable parameters and select Add to Selection and Continue. The configured parameters will be shown under the Added Services section.
Select Submit and ask a 2^nd Security Manager to authorize the request.

Assign access profiles to users

Log in to CitiDirect and select Self Service from the main menu.
Select Users & Entitlements and All Users.
Select the user you'd like to modify.
Scroll down and select Section 3 - User Entitlements to expand the section.
Copy access profiles from another user by clicking Copy access profiles or add/remove access profiles manually. To do so manually, select Add from Available Access Profiles or Remove from Added Access Profiles.
Select Submit and ask a 2^nd Security Manager to authorize the request.

Modify an access profile

Log in to CitiDirect and select Self Service from the main menu.
Under Client Administration Service, select Users & Entitlements.
Select Access Profiles and All Access Profiles.
Select the access profile you want to modify.
To add additional services, select the desired subcategories under Available Services. Configure any applicable parameters and select Add to Selection and Continue. The configured parameters will be shown under the Added Services section. To remove services or parameters, select your desired removals under Added Services and select Remove and Continue.
Select Submit and ask a 2^nd Security Manager to authorize the request.

Delete an access profile

Log in to CitiDirect and select Self Service from the main menu.
Under Client Administration Service, select Users & Entitlements.
Select Access Profiles and All Access Profiles.
Select the access profile you want to delete.
Select Delete and ask a 2^nd Security Manager to authorize the request.

Authorize an access profile request raised by another Security Manager

Log in to CitiDirect and select Self Service from the main menu.
Under Client Administration Service, select Users & Entitlements.
Select Access Profiles and Authorize.
Select the access profile you want to authorize and select Authorize.

Best practices

At Citi, security for our clients is our utmost concern. As hackers and others, such as organized criminals, continue to try to get unauthorized access to funds, we would like to highlight some best practices to help make sure you are secure.

In order to maintain the best level of security, please ensure that you regularly review your controls. CitiDirect supports up to nine levels of approval. It is strongly recommended that your organization set one or more levels of approval. Ensure that high risk or high value transactions go through more stringent approval flows.

Delete former employees

Ensure that when employees leave or transfer to other roles they are deleted from the system and their physical tokens destroyed. It is important that tokens are not reassigned to new users. Also note that users can be scheduled to automatically expire on a future date in order to ensure that the cards are not used improperly.

Entitlement reviews

Perform regular user and entitlement reviews on your system to ensure access is appropriate and current. Ensure the CitiDirect user has received their authentication methods prior to enabling their access to the system. Users that are out of office for extended periods (e.g., vacations, extended leave, etc.) should be disabled until returning to the office.