What is Strong Customer Authentication?

Strong Customer Authentication (or SCA) is a security measure required for sensitive actions, such as:

· Connecting to the platform from a new device.

· Adding a beneficiary.

· Approving a payment or currency conversion.

· Adding a user.

Strong Customer Authentication keeps your account and funds safe and secure in the event that your platform credentials have been compromised.

Strong Customer Authentication methods used by iBanFirst consist of:

· Time-based One-Time Password (TOTP), with mobile or desktop apps such as Google Authenticator or Authy.

· Yubikey.

These methods are both used in a process known as two-factor authentication (2FA). This requires that you authenticate access credentials using both something you know (your iBanFirst username and password) and something you hold in your possession (your phone or Yubikey).

SMS was formerly be used as a Strong Customer Authentication method but is no longer supported.

Configuring your authentication software

Once your profile is created, giving you the status of new platform user, you will receive an activation email asking you to set up your account.

As part of this process, you will be guided through the steps needed to configure an authentication app. To begin with, you will be asked to download Google Authenticator (or, alternatively, Authy).

For Apple

· Go to the App Store on your iPhone and download Google Authenticator. It’s free.

· Launch the app and tap the plus button.

· At the bottom of the screen, two options will appear. Select the option Scan barcode.

· Scan the barcode displayed on your computer screen, which will appear on the iBanFirst account setup page.

· If you have any issues scanning the barcode, you can select the option Enter key manually and fill in the information displayed on the computer screen via your telephone keypad.

· In this case, fill in the 6-digit code displayed on your authentication app and click Approve.

· You’re all set!

For Android

· Go to Google Play and download Google Authenticator. It’s free.

· Launch the app and tap the plus button.

· At the bottom of the screen, two options will appear. Select the option Scan the QR code.

· Scan the QR code displayed on your computer screen, which will appear on the iBanFirst account setup page.

· If you have any issues scanning the barcode, you can select the option Enter key manually and fill and fill in the information displayed on the computer screen via your telephone keypad.

· In this case, fill in the 6-digit code displayed on your authentication app and click Approve.

· You’re all set!

Resetting your authentication software

Contact your Account Manager, who will reset your authentication software account registered on the platform.

Afterwards, log in to the iBanFirst platform and click on the button displaying your initials at the bottom left-hand corner of the page. Select “Security”.

There, you will have the option of configuring Google Authenticator.

Refer to the previous paragraph about configuring your authentication software for set-up purposes.

As part of this process, you will be guided through the steps needed to configure your authentication software. To begin with, you will be asked to select which kind of phone you are using.

For Apple

· You will be prompted to download the relevant authentication app (Google Authenticator or Authy) from the App Store. It’s free.

· Launch the app and tap the plus button.

· At the bottom of the screen, two options will appear. Select the option Scan barcode.

· Scan the barcode displayed on your computer screen, which will appear on the iBanFirst authentication software set-up page.

· Fill in the 6-digit code displayed on your authentication app and click Approve.

· You’re all set!

For Android

· Download the authentication app (Google Authenticator or Authy) from Google Play. It’s free.

· Launch the app and tap the plus button.

· At the bottom of the screen, two options will appear. Select the option Scan the QR code.

· Scan the QR code displayed on your computer screen, which will appear on the iBanFirst authentication software set-up page.

· Fill in the 6-digit code displayed on your authentication app and click Approve.

· You’re all set!

Troubleshooting authentication app issues

If the 6-digit Time-based One-Time Password (TOTP) generated by your authentication app is not recognised by the iBanFirst platform, please check that the time of day settings on your phone and computer are set to automated. This issue is often linked to poor synchronisation between the time of day settings on the computer from which you access the iBanFirst platform and the phone on which your authentication app is installed.

Did this answer your question?