2FA - Two-Factor Authentication

The ATO are mandating changes for cloud providers of payroll software to implement a two-factor authentication approach for users when logging into their payroll software.

More information can be found about this here: https://www.ato.gov.au/general/online-services/online-security/#Securityfordigitalservicesproviders

As online applications grow in popularity due to their convenience and accessibility, so too do the threats of online fraud and identity theft. One way to help protect your data is by enabling what is known as Two-Factor Authentication (also known as 2 step or multi factor authentication). This introduces a second step in the login process so that we can be sure it is really you accessing your information. In a 2 factor authentication scenario, logging on will require something you know (your username and password) as well as something that you have access to like a unique code on your phone.

When 2FA is enabled for your company, the following applications will be effected:

• Direct Access
• Employee Self Service
• DataPay
• MyPay
• SmartPayroll (AUS) / BizPay

The process for setting up and using our applications with 2FA enabled differs slightly between the two main types of user accounts available. Detailed guides are available for both user types, and can be accessed by following the below links. A quick start PDF guide has also been prepared for employee users, which you can download and provide to your employees.

Employee Users

• Relates to any user account which has an Employee Code associated with it, as seen on the Company Users screen. 
• This group includes manager user accounts (as defined in the Company Organisation Structure) assuming their account is also an employee account.

Non-Employee Users

• Payroll Administrators (including read only)
• Payroll Officers
• Managers (when the account is not an employee account e.g. a second account which is used to approve leave for employees in another company)