User Account Updates

The National Restaurant Association (Association) is upgrading our Identity and Access Management (IAM) system to provide better service and support for our customers. As part of this ongoing effort, we are implementing improvements that will streamline the user login experience and enhance the security of personal information across multiple Association websites.  When the process is complete, account credentials created on ServSafe.com will be valid on ServSuccess.com and other Association websites.  

In March 2022, we will implement the updated requirements for both new and existing accounts/profiles.  

  • All new accounts created will require a unique email address that the user must verify.
  • We will no longer allow the use of shared email addresses. 
  • Existing accounts utilizing shared email addresses will be prompted to provide a unique email address.
  • All new accounts will also need to use a unique phone number, which could be a business phone number, mobile phone number or home phone number. 

In addition, these improvements may require your organization’s network and security administrators to make whitelist updates to ensure ServSafe email addresses or domains are not inadvertently blocked by security systems and policies like internal firewalls, and email spam filters. The ServSafe Whitelist Documentation provides all the necessary information your team will need to update the whitelist.  

Please find additional info and frequently asked questions below. 

Q: What is identity and access management?
Q: Why is the National Restaurant Association implementing these changes?
Q: Why are you requiring a unique email and phone number for every user?
Q: What websites are affected?
Q: Are there any system changes that may be required due to these security updates?
Q: What is the timing for these updates?
Q: Will the website be down as the Association releases updates?
Q: As a company who utilized your products and services, what do I need to do?
Q: What should I do if I currently don’t provide a unique email address for each of my employees?
Q: How do I get a certificate from my employees?
Q: My employees are currently using a duplicate email, what should they do?
Q: How will the Association use my email address and/or phone number?
Q: I currently have a user account on one of the Association websites. Do I need to do anything prior to March 12?
Q: I can’t remember my password? What should I do?
Q: I currently have multiple ServSafe accounts that I use to manage my activities that use the same email addresses. Do I need a different email address for each of these accounts?
Q: Who should I contact if I have questions?

 

 

Q: What is identity and access management?

A: Identity and access management (IAM) refers to the policies, standards and tools used to ensure that our customers have the right level of access to the organization’s technical resources. IAM systems are technology solutions that securely manage digital identities and their access to various applications and systems.

Q: Why is the National Restaurant Association implementing these changes?

A: The Association is implementing these changes for security and regulation compliance which will protect your personal information and improve your website sign-up and login experience.  By requiring unique emails and stronger password requirements, we are in line with industry best practices.  These additional security measures will also offer self-service profile and password management and protect your personal information.

Q: Why are you requiring a unique email and phone number for every user?

A: Unique email and phone number will enable us to provide better protection of your personal information. In addition, it will enable us to provide tailored access to our products and services, support additional features and provide you with personalized service. This could include at a minimum, quicker access to products and better communication of exam results, pending expiration dates or other information regarding your certificates and certifications. 

Q: What websites are affected?

A: All National Restaurant Association websites will require unique emails and phone numbers for each user including but not limited to:
 
  • ServSafe.com
  • ServSafeInternational.com
  • ManageFirst.restaurant.org
  • Textbooks.restaurant.org
  • ServSuccess.com
  • AHLEI.org
  • NRFSP.com
  • Restaurant.org
  • ChooseRestaurants.org
Q: Are there any system changes that may be required due to these security updates?

A: These improvements may require your organization’s network and security administrators to make whitelist updates to ensure ServSafe email addresses or domains are not inadvertently blocked by security systems and policies like internal firewalls and email spam filters.  The ServSafe Whitelist Documentation provides all the necessary information your Security/Information Technology team will need to update the whitelist.
 
Q: What is the timing for these updates?

A: On Saturday March 12, 2022, we will implement the updated requirements for both new and existing accounts/profiles:
  • All new accounts created will require a unique email address that the user must verify.
  • We will no longer allow the use of shared email addresses.
  • Existing accounts utilizing shared email addresses will be prompted to provide a unique email address.
  • All new accounts will also need to use a unique phone number, which could be a business phone number, mobile phone number or home phone number.
Q: Will the website be down as the Association releases updates?

A: The following websites will be down for routine maintenance and system updates on Saturday, March 12. We expect the system to be down for at least 15 hours. We recommend rescheduling any exam sessions that are currently scheduled for Saturday, March 12 and Sunday, March 13. We apologize for the inconvenience.
  • ServSafe.com
  • ServSafeInternational.com
  • ManageFirst.restaurant.org
  • Textbooks.restaurant.org
  • ServSuccess.com
  • AHLEI.org
  • NRFSP.com
  • Restaurant.org
  • ChooseRestaurants.org
Q: As a company who utilized your products and services, what do I need to do?
A: If you have existing processes or procedures that ask users to use the same email address, you will need to update your processes, procedures and how to documents to reflect that a unique email and unique phone number will be required going forward.
 
In addition, if you currently have a dedicated portal or landing page, as part of our security enhancements you will need to update your unique company URL that authenticates your users on March 12, 2022 or shortly thereafter to ensure program access and minimize any business disruption. Please reach out to your Sales Representative if you have not received your new link. 
 
Q: What should I do if I currently don’t provide a unique email address for each of my employees?
A: You do not need to provide a unique business email address for every employee. Email is one of the most common forms of communication used today and it is very common for individuals to have their own personal email address for online shipping, cell phone plans, and social media accounts.
 
There are many email services that provide freely available, easy to create options for email addresses, for example, Gmail, Yahoo, Outlook, internet service providers, etc.
 
In addition, the certificates and certifications earned by the individual belongs to the individual. Using a personalized unique email enables the individual to have continued access to their credentials and certifications as they advance with their career. 
 
Q: How do I get a certificate from my employees?
A: ServSafe.com has two (2) ways to validate an employee’s certificate:
  • The Validate Certificate Tool allows you to look up an employee’s certificate to determine if a certificate is valid and the affiliated expiration date.
  • Your employee can log into My Certificates on ServSafe.com and email a copy of the certificate by entering your email address in the respective field and clicking the “Email this certificate” button.
Q: My employees are currently using a duplicate email, what should they do?
A: After March 12, 2022, the first time an individual with a shared email address logs into the website, the user will be asked to update the email address and password upon log in.
 
If you need password assistance, click login and select “Reset Password” or click HERE. If there are multiple profiles using the same email address, you will be prompted to contact our Customer Care team for assistance. We would recommend that you update your email address at this time as well.
 
You can also complete the “Profile Assistance Form” to request an email address and password change. You will receive an email response to the desired email address asking you to reset your password. 
 
Q: How will the Association use my email address and/or phone number?
A: The National Restaurant Association and its affiliates understands that you care about how we collect, use, and share information when you interact with us through our websites, mobile applications, social media sites and handles, email, events, surveys, and research and we value the trust you place in us. Our Privacy Statement explains the  types of information  we collect, how we  use and protect  that information, and the types of information we may  share with others  and under what circumstances.
 
Q: I currently have a user account on one of the Association websites. Do I need to do anything prior to March 12?
A: User profiles on the following websites will require a unique email:
  • ServSafe.com
  • ServSafeInternational.com
  • ManageFirst.restaurant.org
  • Textbooks.restaurant.org
  • ServSuccess.com
  • AHLEI.org
  • NRFSP.com
  • Restaurant.org
  • ChooseRestaurants.org 
You may update your email address on the affiliated website prior to the system updates. This can be done through the “Update Profile” section on your dashboard. After March 12, 2022, we will ask you to verify your email address and profile information the first time you log in to perform a secondary validation on your account.
 
If you need password assistance, click login and select “Reset Password” or click HERE.. If there are multiple profiles using the same email address, you will be prompted to contact our Customer Care team for assistance. We would recommend that you update your email address at this time as well. 
 
Q: I can’t remember my password? What should I do?
A: If you need password assistance, click login and select “Reset Password” or click HERE. If there are multiple profiles using the same email address, you will be prompted to contact our Customer Care team for assistance. We would recommend that you update your email address at this time as well.
 
You can also complete the “Profile Assistance Form” to request an email address and password change. You will receive an email response to the desired email address asking you to reset your password.
 
Q: I currently have multiple ServSafe accounts that I use to manage my activities that use the same email address. Do I need a different email address for each of these accounts?
A: No, you will not need a different email address. If you have multiple accounts, we recommend that you login and verify your record with your most used account going forward. If there is relevant information from other accounts that you need access, we can merge your accounts into a single account going forward. You can use the “Profile Assistance Form” to request an account merge. 
 
Q: Who should I contact if I have questions?
A: If you have questions on these updates, please reach out to your Sales Representative.
 

Follow @ServSafe