Strong Customer Authentication (or SCA) is a security measure required for sensitive actions, such as:

· Connecting to the platform from a new device.

· Adding a beneficiary.

· Approving a payment or currency conversion.

· Adding a user.

Strong Customer Authentication keeps your account and funds safe and secure in the event that your platform credentials have been compromised.

Strong Customer Authentication methods used by iBanFirst consist of:

· Time-based One-Time Password (TOTP), with mobile or desktop apps such as Google Authenticator or Authy.

· Yubikey.

These methods are both used in a process known as two-factor authentication (2FA). This requires that you authenticate access credentials using both something you know (your iBanFirst username and password) and something you hold in your possession (your phone or Yubikey).

SMS was formerly be used as a Strong Customer Authentication method but is no longer supported.

Once your profile is created, giving you the status of new platform user, you will receive an activation email asking you to set up your account.

As part of this process, you will be guided through the steps needed to configure an authentication app. To begin with, you will be asked to download Google Authenticator (or, alternatively, Authy).

For Apple

· Go to the App Store on your iPhone and download Google Authenticator. It’s free.

· Launch the app and tap the plus button.

· At the bottom of the screen, two options will appear. Select the option Scan barcode.

· Scan the barcode displayed on your computer screen, which will appear on the iBanFirst account setup page.

· If you have any issues scanning the barcode, you can select the option Enter key manually and fill in the information displayed on the computer screen via your telephone keypad.

· In this case, fill in the 6-digit code displayed on your authentication app and click Approve.

· You’re all set!

· Go to Google Play and download Google Authenticator. It’s free.

· Launch the app and tap the plus button.

· At the bottom of the screen, two options will appear. Select the option Scan the QR code.

· Scan the QR code displayed on your computer screen, which will appear on the iBanFirst account setup page.

· If you have any issues scanning the barcode, you can select the option Enter key manually and fill and fill in the information displayed on the computer screen via your telephone keypad.

· In this case, fill in the 6-digit code displayed on your authentication app and click Approve.

· You’re all set!

If the 6-digit Time-based One-Time Password (TOTP) generated by your authentication app is not recognised by the iBanFirst platform, please check that the time of day settings on your phone and computer are set to automated. This issue is often linked to poor synchronisation between the time of day settings on the computer from which you access the iBanFirst platform and the phone on which your authentication app is installed.