Changes to Multi-Factor Authentication (MFA) affecting GovConnect (10 Feb 2022)

Rav

ATO required changes to GovConnect MFA

'Remember me' functionality limited to 24-hour period

As part of our ongoing obligations with the ATO, we are required to make some changes to our Reckon GovConnect multi-factor authentication (MFA) process.

From 10 February 2022, the 'remember me' functionality for MFA will be limited to a 24 hour period. There are no additional steps you are required to undertake, this is simply a notification to let you know MFA will be required more often.

This change had been mandated for all digital service providers who must meet a minimum level of security requirements under the Operational Security Framework in order to access ATO Digital Services. To learn more about these requirements click here.

The change aims to prevent business risk and security threats presented by the continual expansion and growth of digital services across the ecosystem including identity theft, hacks, commercial advantage and fraud.

If you have any questions on this, please feel free to leave a comment below.