This article will provide you guidance on how to set up Multi-Factor Authentication (MFA) which provides an additional level of security for your account. 

When you log into Class you will be prompted for:

1. Your Class username and password, along with
2. A code generated by an authenticator app

MFA is compulsory for Class users that are set up as Access Controllers, Administrators, Tax Agents, Feeds Admins, Advisers or Auditors.

Enabling Multi-Factor Authentication

When you first log into Class, you will be prompted to set-up your MFA. The steps are:

1. Download and install an authenticator app onto your phone (e.g Google Authenticator, Microsoft Authenticator, etc.)
   
2. Add a new account in your authenticator app and scan the QR code (You may also need to install a bar code scanner so you can scan the QR code)
3. Enter the code displayed in the authenticator app into the box and click Verify Code and Turn On.
   

Security Questions

1. The Security Questions screen will open (as shown below), you will be asked to set up three security questions. Select your preferred question from the drop-down and enter the relevant answer.
2. Once you have entered all of the answers click Save.
   
   
   

The next time you log into Class you will be asked to provide a verification code from the authenticator app.

Logging into Class with Multi-Factor Authentication 

Once multi-factor authentication has been enabled for your account, you will be asked to enter the code from the authenticator app after entering your username and password on login.

1. Enter your username and password in the login page as usual 
   
2. Open your authenticator app on your mobile device and enter the code displayed to complete the login process. 
   
   

   If you do not want to be asked for the authenticator code again for the next 30 days, select the checkbox Remember this device for 30 days?

   
   
   

If you don't enter an authentication code within two minutes you will be directed back to the main login screen to start again.

Verifying Enabled Status

You can verify which users associated with your business have enabled multi-factor authentication.

1. If you are an Access Controller, from the Business menu, navigate to the Maintain Users screen
2. On the Maintain User screen, you will see a column displaying the Multi-Factor Authentication state: Enabled or blank (not enabled)

This table can be exported and filtered according to the enablement status: 

Resetting Multi-Factor Authentication

If you change your mobile device and no longer have access to the configured authenticator app, you will need to reset MFA. 

How to reset MFA

After entering your Class login details and clicking Login, the authenticator screen will open where you can enter your authenticator code. Instead of entering the code click on Reset MFA as shown below:

A screen will open where you will be prompted to answer two of the security questions you set-up previously. Enter in the correct answers and click Submit.

The MFA setup screen will open as shown in Enabling Multi-factor Authentication above. Please follow the steps on this screen to reset MFA. Refer to Enabling Multi-factor Authentication above for guidance.

Alternatively, you can reset MFA by clicking on the icon shown below > Rest Multi-Factor Authentication 

After clicking on this menu, a screen will open and you will be prompted to answer two of the security questions you set up previously. Enter in the correct answers and click Submit.

The MFA setup screen will open as shown in Enabling Multi-factor Authentication above. Please follow the steps on this screen to reset MFA. Refer to Enabling Multi-factor Authentication above for guidance.

What's Next?

Refer to MFA for Auditor's for guidance on MFA configuration for Auditor roles.