Enabled MFA but have not been challenged at all since 15 May

JenSchmidt

Good Morning. I have enabled MFA but have not been challenged at all since 15 May 2024 when logging in. Anyone else having this happen.

Nickiu

Hi @JenSchmidt ,

Did you setup MFA with your SMS or Authenticator app?

Thank you,

Nick

JenSchmidt

Hi Nick

I setup MFA with SMS.

Rav

Hi @JenSchmidt

That sounds rather strange and I can't say I've come across other reports of this so far.

The MFA challenge will appear once in a 24 hour period per device/browser so if you enabled it on the 15th and haven't been challenged since is a bit odd.

Are you using a shared PC and/or a shared login with someone else in your business/organisation? Could someone else who is using your login in the workplace have already successfully passed MFA for the day and you're logging in afterward on the same PC?

GerryWinter

I also havent been ask for my MFA since i did it originally.

Rav

Thanks for the report on this @GerryWinter, can you let me know if your MFA is also setup as SMS like Jen above?

I'm guessing its not the case but just checking, you're not using a shared PC either correct? Can you shoot me the RAH user name that you've noticed this occurring on in a private message please

Kyle

I too have not been challenged for a code since after the initial set up (I have set it up as receiving a code via sms as this was already set up for my stp lodgement on the reckon portal).

I have another colleague trying to log in (to her own account) this morning and it is asking her for a code but she is not receiving the sms from Reckon. There is no option on her screen to resend another code.. the only option is to enter the recovery pin which is says will remove the existing device linked ??

Rav

Hi guys

Thanks for the reports on this. Can I just clarify a couple of things;
1. Since setting up MFA on your Hosted account when it went mandatory last week, did it enable ok? ie. if you attempt to login to Hosted today, does it just allow you through without the MFA challenge appearing or is there something else occurring on-screen?

2. If the above is correct, if you click on Login Security Settings (MFA) on the dashboard screen, does it show that your MFA Status for your Hosted account is Enabled?

ℹ️ You will not be challenged again for MFA if its been less than 24 hours since your last successful MFA challenge on the same device/browser.

JenSchmidt

Hi Rav

I'm not using a shared PC and I had no trouble enabling the MFA and status said "enabled"

Jen

Rav

Thanks for confirming Jen. Can I get you shoot me your Reckon Accounts Hosted login user name that you've noticed this occurring on in a private message and I'll have a chat with our team.

Kyle

Hi Rav, I have just logged out and logged back in (no request for a code). Clicking on Login Security settings (MFA) shows me exactly the same screen as what you have posted (ie enabled)

Rav

Thanks @Kyle

So to confirm, you haven't been MFA challenged at all since setting it up on the 15th, correct? ie. its been well over 24 hours since you last successfully passed MFA when logging into your Hosted account.

If so, can you please shoot me your Hosted user name in a private message please? I'd like to speak with the product team about this and have an example they can look at.

Jennifer Wann

It's after May 15 and I still haven't been asked for a MFA when I log into Hosted. Neither have my clients been asked for it a week after setting it up. I thought it was to be renewed every 24 hours

Rav

Hi folks

Just a general update for everyone in this thread, our Hosted team are currently looking into these reports. Thank you to @JenSchmidt for sending through your specific example 👍

I'll keep you posted with more info as soon as I receive it from the team 🙂

Kyle

Hi Rav,

I definitely had not been challenged to enter a code since setting up MFA and from the 15th and then coincidently, yesterday when logging in I was required to enter a Reckon code and again this morning so it seems to now be working.

GerryWinter

I got challenged this morning.

JenSchmidt

Me too. Thanks Rav.

Rav

Awesome thanks for letting me know!

The team rolled out a fix overnight thanks to your reports on this. The MFA challenge will appear once in a 24 hour period per device/browser as it should have been after 15 May.

If you still have any trouble with this please let me know.

Thanks again and apologies for the confusion this caused.

cosmic

Google Authenticator works perfectly for Reckon Auth.

This is good for us , as we have teams of developers and Virtual staff using, good security and know whos is logging in .