MFA and Concurrent users
I have several clients that have one concurrent user licence, but have more than one staff member that can log in.
Can each staff member create their own MFA? Or does MFA effectively mean that every single staff member will need their own license??
This will also affect my practice as I have more than one staff member that uses my employee license on Reckon, but on different days.
Best Answer
-
Hi @Lizzie NC
The upcoming mandatory MFA to Hosted is a compliance requirement. We're required to enable MFA on Reckon Accounts Hosted at the login level. Failure to do so could potentially mean we can no longer handle Single Touch Payroll at best, and at worst put our valued customers data at risk.
When it comes to Hosted licencing, our licencing terms have always stated that a single licence allows one user of the service. In order to have concurrent users they each require their own licence.
That aside, your Reckon Accounts Hosted login, like other online accounts you have, isn't designed to be shared across multiple individuals. It invalidates any realistic account security and isn't best practice. Ideally, each individual user should have their own licence to Hosted. Each licence allows concurrent access to your file(s) in Hosted ie. its own login, and it will also have its own dedicated MFA for that specific user.
We're always happy to have a chat around managing multiple users and your options when it comes to licences etc. If you're sharing a login across multiple users then our customer service team (1800 732 566) is happy to have a conversation around getting the licencing side of things organised & setup.0
Answers
-
Hi @Lizzie NC
Multi-Factor Authentication is enabled on the specific Hosted login itself so if you have multiple individuals requiring access, best practice is that they have their own licence which will also mean they will have their own individual MFA on the login.0 -
One of the best things about Reckon was that we didn't have to make our clients, or ourselves, pay for licences that weren't needed. The licensing has ALWAYS been for concurrent users.
This is a very clever way of making the software several times more expensive. I suggest you work out a way that you can allow MFA on a different method. If the firm's email address was used, this would allow this!!!
I am NOT happy with it being tied to one person's mobile.
3 -
only other way is to have dedicated phone that stays with the computer, but if the users are in different locations they would have to ring the admin person to get the code
1 -
And NONE of the other SME software works this way. It makes Hosted stupidly expensive. The method of implementing 2FA only makes it a lot worse. I would like to know why the system is designed this way.
0 -
@Kris_Williams that's not an answer
0 -
I can not stress how unhappy I am with these answers.
Other software that I am involved with uses an email address for authentication.
I think Reckon has used the ATO as an excuse to make the software single specific person instead of single concurrent user. That is deceptive conduct in my opinion.
6 -
I am completely in support of Lizzie (above). This is an outrageous land-grab - under cover of "the ATO made me do it". We have a micro business and would use Reckon Hosted about 4-6 hours PER MONTH. However, we need two different people to be able to access the software at different times. We have been operating this way for YEARS. There would be thousands of your users operating in exactly the same way. There is no way that we are doubling our software expense for the sake of some recently concocted "best practice". You need to come up with a better solution dudes.
4 -
Correct. The other software doesn't work this way
0
