Upcoming 2FA/MFA Changes

We're releasing some more changes to Multi-Factor Authentication
, which will be enforced in all accounts over the coming weeks.
All users with an admin-type role
 (e.g., 'admin', 'payroll officer', or 'general manager') will be required to set up MFA 
before they can continue accessing the platform. It is recommended to set up 2FA before this to avoid any interruptions. Learn more about doing this here.
Users with a manager
 or employee
 role who do not have MFA enabled will continue to receive a one-time code via email after entering their email address and password. They will then be redirected to the existing code entry page to complete sign-in.
These changes will not apply to users who authenticate via Single Sign-On (SSO).
When manually creating a new child account, the user will also be required to enter an authenticator code. API behaviour will remain unchanged. 