Setup and Configuration

Accessing your User Account Details and Two-Factor Authentication

There are many reasons why you or your employees may need to manage your account user name or email address or update your personal details and you can do this by accessing your My account settings. It is also important that you understand how to use two factor authentication on your account to ensure enhanced security. 

Getting started

A short video on this setup can be found here.

  1. Log into your payroll platform
  2. From the dashboard, click on your name in the top righthand corner of the screen.
  3. From the drop-down menu select My Account.

email_my_account.jpeg

From the My Account page you can then edit your personal information:

  • Account details - Includes the following fields:
  • Name
  • Email Address (explained in detail further below)
  • Time Zone
  • Password;
  • API key;
  • Marketing/Product Updates opt-in

Other options accessible from this page:

  • Two-Factor Authentication and Google Authenticator (explained in detail further below)
  • Related businesses - This will show both business and employee self service portals that the user has direct access to
  • Terms and conditions
  • Privacy policy

Any of the above settings can be amended from this screen. Once you have made any desired changes, click Save

 

Update your email address

If you choose to update your email address, this is the verification process you will need to follow.

  1. First of all, you’ll be prompted to enter the new email address within the following context panel.email_context__1_.jpeg
  2. Click the Change email button. The system will then send an email to your current email address, confirming that a change has been requested.email_4.jpeg
  3. Along with instructions to access the new email account to complete the process. The new email account will be sent a separate email which will contain a link in order to verify the new email address, and complete the update. email_5.jpeg
  4. You have 72 hours to verify this link. Once the verification link has been clicked, you will be prompted to enter your existing login details (email and password):
  5. Once these have been confirmed, the system will then make the change and show the following confirmation:image.png
  6. The next time you log in, the new email address will be used.

For information relating to updating an employees email address on their behalf please see this article.

Two-Factor Authentication 

Two-factor authentication (2FA) provides an additional layer of security and makes it harder for attackers to gain access to your account. With regards to any end user that can access taxation or superannuation related information of other entities or individuals (for example, tax agents, employers), the ATO has deemed 2FA mandatory for the following users when logging into the payroll platform:

  • Full access users; 
  • Restricted users with access to one or more reports;
  • Restricted users with report packs permission (this is different to a report pack recipient and explained further below); and
  • Restricted users with STP Pay Event Approver permission.

The above users will be unable to log into the payroll platform until at least two 2FA options have been enabled. Of these options, email is mandatory. 

You will know that this is the case when you try to log in and see the following screen:

Screen_Shot_2018-05-28_at_17.33.21.png

To enable 2FA you will need to confirm your email address, in addition to your mobile phone and/or Google authenticator as follows:

Confirming email address

The email address entered in this field is the email address used for your account. If you need to change this, you must do so from the "Email Address" field at the top of the screen. When you click on "Confirm Email Address" you will be sent a confirmation request via email. Clicking on the link contained in the email will act as confirmation of your email address.

Adding mobile phone  

We do not auto-populate mobile numbers for security reasons. As such, users will always need to enter their number in this section. The number format required is the country code plus the number (i.e.  +61xxxxxx). Once you enter your mobile phone number, click on "Send Confirmation Code". You will be sent a code via sms - this code will need to be entered in the field specified and then click on "Confirm".

Once either or both of the above settings are confirmed, you will notice that the "Enable Two-Factor Authentication" button is activated and can be clicked on. When you do click on the button the following popup will appear:

Screen_Shot_2018-05-28_at_19.03.12.png

Please note: SMS codes for Australian businesses can only be sent to AU numbers. For international users please set up Email and Google Authenticator as the two authentication methods. 

Google Authenticator

To enable Google Authenticator you'll need to open the Google Authenticator app on your phone, then click the 'Configure Google Authenticator' link on the web page. You'll then need to scan the barcode or QR code that is shown. Below is an example (the barcode has been blurred as it is only for demonstration purposes):

2020-08-26_15-21-31.jpeg

Enter the 6-digit code that is shown in the app, and click 'Enable'. 

You will then be redirected to the main login screen. After you have logged in you will be taken back to the "My Account" screen where you will see that 2FA has been enabled:

Screen_Shot_2018-05-28_at_19.06.18.png

Any full access user, restricted user and employee user can choose to opt-in and enable 2FA for their account. To do this follow the same instructions as above.

 

If you have any questions or feedback, you can contact us via support@paycat.com.au