Lockheed Martin Employee Login Guide: AccessLM, LMSecure, and Portal Troubleshooting

Lockheed Martin employees access corporate applications, HR resources, enterprise email, and payroll systems through the primary single sign-on system known as LM Access (or AccessLM). Authentication requires enterprise credentials paired with multi-factor authentication (MFA), hardware smart cards, or security tokens, depending on whether access is initiated from an internal network, remote workstation, or vendor portal.

Understanding the Lockheed Martin Identity and Access Architecture

Lockheed Martin relies on a defense-grade Identity and Access Management (IAM) framework designed to satisfy strict Department of Defense (DoD) cybersecurity requirements. Because the corporation operates within classified, controlled unclassified information (CUI), and international traffic in arms regulations (ITAR) environments, user authentication is strictly segmented based on role, location, and device ownership.

Employees, contractors, and external partners interact with distinct portals across the enterprise infrastructure:

• LM Access (AccessLM): The core identity provider and Single Sign-On (SSO) gateway. It validates user identities before routing them to internal enterprise applications.
• LM People: The central HR portal hosted on enterprise human capital management platforms. It serves active personnel for payroll, tax forms (W-2s), health benefits, direct deposit management, and personal records.
• LMSecure Remote Access / VPN: The encrypted gateway (utilizing enterprise VPN platforms such as GlobalProtect or Cisco AnyConnect combined with Zscaler Zero Trust solutions) used by remote employees to establish secure tunnels into the Lockheed Martin Corporate Network (LMCN).
• Exostar Managed Access Gateway (MAG): The dedicated authentication portal for external suppliers, joint-venture partners, and defense vendors requiring secure collaboration with Lockheed Martin business units.

Enterprise Security Notice Accessing Lockheed Martin networks without authorization or exceeding authorized access levels violates federal regulations, including the Computer Fraud and Abuse Act. All activities on enterprise portals are monitored, logged, and audited in compliance with defense contracting standards.

Mandatory Prerequisites for Account Authentication

Before attempting to log in to any Lockheed Martin platform, users must ensure their environment satisfies technical and credential requirements. The specific authentication method varies according to workforce classification and network origin.

1. Primary Authentication Factors

• NTID / User ID: The unique alphanumeric identifier assigned by Lockheed Martin Human Resources upon onboarding.
• Enterprise Password: A complex passphrase updated periodically in accordance with corporate password policy guidelines.

2. Multi-Factor Authentication (MFA) Devices

To comply with federal cyber hygiene guidelines published by the National Institute of Standards and Technology (NIST), simple password authentication is disabled across all public-facing endpoint gateways. Users must utilize one of the following:

• Smart ID Card / Badge (CAC/PIV): Enterprise-issued physical smart card inserted into an integrated or USB card reader, validated via a personal identification number (PIN).
• Hard Tokens (RSA SecurID / YubiKey): Physical hardware tokens generating time-based one-time passwords (TOTP) or utilizing FIDO2/WebAuthn security standards.
• Soft Tokens / Mobile Authenticator: Approved authenticator applications (such as PingID or Microsoft Authenticator) registered to a corporate-managed or secure personal mobile device.

[No backticks allowed in output - verifying zero usage of code blocks]

Step-by-Step Login Procedures by User Type

Access steps differ based on whether you are on a corporate network, working remotely, or logging in as a third-party vendor.

Accessing Systems via Internal Corporate Workstation

1. Boot your enterprise-issued laptop or desktop connected to the internal Lockheed Martin network (LAN or internal Wi-Fi).
2. Insert your Lockheed Martin Smart ID Card into the card reader when prompted at the Windows log-in screen.
3. Key in your personal Smart Card PIN.
4. Launch your enterprise web browser (Edge or Chrome). The web browser uses Kerberos/Active Directory pass-through authentication to automatically log you into the internal LM Access portal without requiring re-entry of credentials.

Accessing LM Access / LM People from Remote Personal or Commercial Devices

1. Navigate to the official Lockheed Martin External Access gateway URL (access.lockheedmartin.com or lmpeople.lockheedmartin.com).
2. Enter your assigned Lockheed Martin NTID and password on the LM Access login screen.
3. Select your designated authentication method (e.g., Soft Token, Hard Token, or PingID Push Notification).
4. Approve the push notification on your mobile device or enter the six-to-eight-digit time-based passcode displayed on your hardware token.
5. Upon successful MFA verification, the portal routes you to the unified dashboard, where you can select target applications such as LM People, MyLM, or Enterprise Webmail.

Supplier and Contractor Login via Exostar MAG

1. Go to the Exostar Managed Access Gateway login portal (mag.exostar.com).
2. Input your Exostar Organization ID, User ID, and Password.
3. Complete the required Exostar OTP (One-Time Password) or Phone OTP verification step.
4. From the Exostar MAG dashboard, locate the Lockheed Martin application tab to launch shared partner tools, procurement engines, or technical data repositories.

Overview of Key Lockheed Martin Internal Portals

Once authenticated through LM Access, employees gain centralized entry to specialized functional portals.

LM People & HR Self-Service

LM People acts as the employee self-service hub. Key tasks performed within LM People include:

• Payroll & Compensation: Viewing bi-weekly or monthly pay stubs, setting up direct deposit banking details, and retrieving annual W-2 tax statements.
• Benefits Enrollment: Selecting health, dental, vision, and life insurance coverage during Open Enrollment or following qualified life events.
• Savings & Retirement: Linking to the Lockheed Martin Salaried or Hourly Savings Plan (401k) portal administered by trusted financial institutions.
• Paid Time Off (PTO): Requesting vacation days, submitting sick leave, and reviewing accrued PTO balances.

LMSecure & Remote Workplace Tools

Remote productivity requires establishing encrypted transport sessions to safeguard sensitive proprietary data:

• Outlook Web Access (OWA) / Microsoft 365 Enterprise: Direct web-based access to corporate email, calendars, and Teams collaboration channels under strict data loss prevention (DLP) policies.
• Concur Travel and Expense: Submitting business travel itineraries, booking flights/hotels through preferred vendors, and filing expense reimbursement reports.
• ERP & Operations Systems: Accessing enterprise software engines (SAP, Deltek Costpoint, or internal supply chain tracking tools) restricted to authorized project personnel.

System Matrix: Lockheed Martin Authentication Portals

The following table summarizes the operational requirements, primary user base, and security features of the primary login gateways across the enterprise:

Technical Security Standards and Compliance Protocols

Lockheed Martin's identity architecture is structured around defense industry security standards. Understanding these underlying rules clarifies why credential requirements and device policies are strictly enforced.

Defense Federal Acquisition Regulation Supplement (DFARS) Compliance

Under DFARS clause 252.204-7012, defense contractors must provide adequate security on all covered contractor information systems. Multi-factor authentication on LM Access ensures that unauthenticated endpoints cannot access Controlled Unclassified Information (CUI).

Cybersecurity Maturity Model Certification (CMMC)

Systems connected to Lockheed Martin web properties align with CMMC requirements. Access rules mandate:

• Enforcement of session lockouts after defined periods of inactivity.
• Strict password complexity criteria updated on scheduled cycles.
• Immediate revocation of NTID privileges upon workforce offboarding or contract termination.

For detailed guidelines on defense cyber security frameworks, review official publications on the Lockheed Martin Corporate Governance portal and federal cybersecurity repositories.

Step-by-Step Troubleshooting for Common Login Failures

Authentication issues typically stem from credential mismatch, network conflicts, token desynchronization, or browser cache corruption. Use the following structured procedures to resolve login failures.

Issue 1: MFA Push Notification Not Arriving (PingID / Mobile Soft Token)

1. Verify that your mobile device has an active cellular connection or Wi-Fi connectivity.
2. Confirm that notifications are explicitly enabled for the authenticator application within your mobile device settings.
3. Open the authenticator app manually; if the push prompt does not pop up automatically, generate a manual One-Time Passcode (OTP) inside the application.
4. Input the numerical OTP directly into the secondary prompt on the LM Access login screen.

Issue 2: Smart Card Reader / PIV Badge Not Recognized

1. Disconnect the external USB card reader, wait 10 seconds, and reconnect it to a direct USB port (avoid unpowered USB hubs).
2. Clean the metallic chip on your Smart ID Card gently with a soft, lint-free cloth.
3. Open the Windows Certificate Manager (certmgr.msc) or enterprise smart card software to verify that the card certificates are visible to the operating system.
4. Restart your web browser entirely and re-attempt authentication.

Issue 3: Invalid Credentials or Account Locked Message

Account Lockout Security Protocol Enter your password incorrectly three consecutive times, and the system automatically locks your NTID for a mandatory security window (typically 15 to 30 minutes) to prevent brute-force attacks.

1. Wait out the automated lock period before attempting another login.
2. If you have forgotten your password, navigate to the official Lockheed Martin Self-Service Password Reset (SSPR) tool linked on the LM Access main page.
3. Answer your registered security challenge questions or request a verification code sent to your registered backup mobile phone.
4. Create a new compliant password that has not been used on your account previously.

Issue 4: Browser Redirect Loops or HTTP 400/403 Errors

1. Clear your web browser's cache, cookies, and temporary site data for all lockheedmartin.com domains.
2. Ensure third-party cookies required for cross-domain SSO authentication are not blocked by browser security extensions or ad-blockers.
3. Attempt access using an alternative approved enterprise browser (e.g., switching between Google Chrome and Microsoft Edge).
4. Verify your local system clock is accurately synchronized with network time servers (NTP), as time skew greater than 30 seconds breaks time-based MFA tokens.

Frequently Asked Questions

How do I log in to LM People to view my pay stubs or W-2 statement?

Go to the official LM Access login page (access.lockheedmartin.com) and authenticate using your NTID, enterprise password, and secondary MFA method. Once inside the main application dashboard, click on the LM People icon to open your HR self-service menu, where compensation and tax documents are stored.

What should I do if I lose my hardware RSA token or Smart ID Card?

Contact the Lockheed Martin Enterprise Service Desk (ESD) immediately to report the lost item. IT Security will revoke the certificates associated with the lost badge or token to protect network integrity and assist you in provisioning a temporary bypass code or replacement hardware.

How do former employees or retirees access their Lockheed Martin 401(k) and pension details?

Retirees and former staff should access their benefits directly through the official plan administrator's public web portal (such as Empower Retirement) rather than internal corporate gateways. Alternatively, former employees can call the Lockheed Martin Employee Service Center at 866-562-2363 for assistance with historical W-2s or retirement statements.

Can I access Lockheed Martin webmail from a non-corporate personal computer?

Yes, limited webmail access is available via Microsoft Outlook Web Access (OWA) through the LM Access gateway. However, your session must be authenticated using approved multi-factor authentication, and downloading sensitive attachments to unmanaged personal devices is strictly restricted by Data Loss Prevention (DLP) controls.

Where do external suppliers log in to work on Lockheed Martin contracts?

External vendors and suppliers must log in through the Exostar Managed Access Gateway at mag.exostar.com. Supplier credentials are managed through Exostar rather than internal LM Access NTID accounts, requiring vendor-specific hardware or phone OTP tokens.

IT Helpdesk Contact and Support Protocols

If self-service troubleshooting does not restore portal access, reach out directly to enterprise support facilities. Never share your password, PIN, or MFA tokens with anyone, including IT support personnel.

• Lockheed Martin Enterprise Service Desk (ESD): Available 24/7 for internal software, network, and account unlock support. Call the internal extension or local country toll-free number listed on your employee quick-reference card.
• Lockheed Martin Employee Service Center (LMESC): Dedicated to HR, payroll, medical benefits, and PTO inquiries. Reach support by phone at 866-562-2363 (Toll-Free) or international equivalent lines during standard business hours.
• Exostar Customer Care: For vendor-facing portal access issues, submit a support ticket via the official Exostar Resource Center or call their direct support desk.