The configuration for the attestation is available via the configuration menu for the user. On selecting the configuration, an editable text box is presented to the user to enable them to create or modify the attestation text. To enable the attestation at login, the enabled flag must be selected and then this flag, along with any new or updated text will be sent to the system manager for approval. Any change to the enablement flag or text will need to be approved by the system manager before it is active.

If the attestation is enabled, after the user enters their correct username and password, they are taken to the modal attestation screen. Here, they can either select Accept or Reject.

The selection of accept or reject is logged in the security audit log, along with the username and time. Selecting accept will allow the user to proceed with access to the system, selecting reject will return the user back to the login screen. The security audit log is available via the Security Policies tab in the system settings in Pega dev studio.