Industry standard two-factor authentication (2FA) gives you and your organisation even more protection by requiring an extra identify confirmation at log in. 

Use these instructions to set up two-factor authentication if you do not access the Kiosk via smartphone.

For more information here: Two-Factor Authentication to Access the Kiosk on a Smartphone.

For more information here:  Quick Setup Guide for Two-Factor Authentication

Before you start

These instructions assume you have setup a password in iPayroll, and have an authenticator app installed on your smartphone, tablet or desktop.

Please refer to the terms and conditions provided by the companies that own the authenticator apps

If you are new to iPayroll, and you are an employee accessing the Payslip Kiosk:

• You need to activate your Kiosk login and set your password. See Activate your Payslip Kiosk Account for instructions on activating your Kiosk login.
  Note: If 2FA is compulsory for you as a user, you will be required to set up 2FA during the activation process.

If you are new to iPayroll, and you are an Organisation, Group, Partner or Affiliate user:

• You need to set your password for the first time.
  Note: If 2FA is compulsory for you as a user, you will be required to set up 2FA as part of this process.

How to Get to the 2FA Setup Page

As a user, 2FA can be optional or made compulsory by your employer.

If 2FA is compulsory for you as a user, when you attempt to login to iPayroll, the Two Factor Authentication page will display as part of the login process.

If 2FA is optional, you can set your 2FA once you have logged into iPayroll.

Access the Two Factor Authentication page once logged into iPayroll

1. Log into iPayroll from your desktop computer or tablet.
2. Open your iPayroll Profile by selecting your 'Logged in as your username' hyperlink at the top right of the page (next to Logout).
   Your Preferences sub-menu of your profile displays.
3. Select the Two Factor Authentication sub-menu.

Set up 2FA by Scanning the QR Code

You will need to have your authenticator app installed on a smartphone, tablet or desktop. You will use this device to scan the QR code displayed in iPayroll.

For information on third-party authenticator apps, see Third-Party Authenticator Apps.

We have also put together a list of the more common third-party authenticator apps here:

• Desktop Authenticator Apps
• iOS (iPhone / iPad) Authenticator Apps
• Android Authenticator Apps
  

1. Open the authenticator app on your device.
2. Use your device to scan the QR code displayed in the Two Factor Authentication page in iPayroll.
   Your authenticator app will add an iPayroll account.
3. In iPayroll, in the Verification code field, enter the 6-digit verification code as displayed in your authenticator app.
   Note: The verification code regenerates every 30 seconds.
4. Select Confirm.
   A success message displays confirming two-factor authentication is now enabled.

Note: Each time you log into iPayroll from now on, you will see the Two factor is enabled page. Enter the latest 6-digit verification code from your authenticator app.

Note: If you believe your device, which contains your authenticator app, has been compromised, we recommend you reset your two-factor authentication. See Disable or Reset Two-Factor Authentication.

Set up 2FA by Manually Entering the Time-Based Key and Your Username

Use this method if you are unable to scan the QR code, for example, the authenticator app is installed on the same device that you access iPayroll with.

1. Open the authenticator app on your device.
2. In iPayroll, at the Two Factor Authentication page, select the I can't see the QR code button.
   iPayroll displays the time-based key.
3. Either write down the 16-character code or copy the code using your device's copy option.
   Note: If you write down the time-based key, make sure you either dispose of the written copy once you have set up 2FA, or keep the written code in a safe place.
4. In your authenticator app, manually enter the time-based key and your username, or a name that clearly identifies this account, to set up an account.
   Note: See Third Party Authenticator Apps for instructions on adding manual accounts into some of the more common authenticator apps.
5. In iPayroll, in the Verification code field, enter the 6-digit verification code as displayed in your authenticator app.
   Note: The verification code regenerates every 30 seconds.
6. Select Confirm.
   A success message displays confirming two-factor authentication is now enabled.

Note: Each time you log into iPayroll from now on, you will see the Two factor is enabled page. Enter the latest 6-digit verification code from your authenticator app.

Note: If you believe your device, which contains your authenticator app, has been compromised, we recommend you reset your two-factor authentication. See Disable or Reset Two-Factor Authentication.

Log Into iPayroll Once 2FA is Enabled

1. Login to iPayroll
2. In the Username field, enter your username.
3. In the Password field, enter your password.
4. Select Login.
   The Two factor authentication is enabled page displays.
5. In the Authentication code field, enter the latest 6-digit verification code from your authenticator app.
6. Select Verify.
   
7. The login process is complete.
   

Related Articles

• Quick Set Up Guide for Two-Factor Authentication
• Disable or Reset Two-Factor Authentication
• Set up Two-Factor Authentication to Access the Kiosk on a Smartphone
• Disable or Reset Two-Factor Authentication in the Kiosk on a Smartphone
• Introduction to Two-Factor Authentication
• More Information on Two-Factor Authentication