What is Strong Customer Authentication?

Strong client authentication (or SCA) is a security measure required for sensitive actions, such as:

· Connecting to the platform from a new device

· Adding a beneficiary

· Validating a payment or currency conversion

· Adding an user

· Etc.

Strong customer authentication keeps your account and funds safe and secure in the event when your platform credentials may have been compromised.

Strong customer authentication methods available at iBanFirst are:

· Time-based one-time password (TOTP), with mobile or desktop apps such as Google Authenticator or Authy

· Yubikey

These methods are both used in a process called two-factors authentication (2FA). They will require you to authenticate using both something you know (your iBanFirst credentials) and something you have (your phone or Yubikey).

SMS could formerly be used as a strong customer authentication method but is no longer supported.

Configuring your authentication software

After your profile has been created as a new platform user, you will receive an activation email allowing you to setup your account.

In this process, you will also be guided through the steps to configure your authentication software. To start with, you will be asked to download the Google Authenticator software (or alternatively Authy).

For Apple

· Go to the App Store on your iPhone and download Google Authenticator. It’s free.

· Launch the app and tap the plus button.

· At the bottom of the screen, two options will show up. Select the option Scan barcode.

· Scan the barcode displayed on your computer screen, on the iBanFirst account set-up page.

· If you have any issue with scanning the barcode, you can switch to the option Enter key manually and fill on your phone the information displayed on the computer screen.

· Fill in the 6-digits code that will be displayed in your authentication software and click Validate.

· You’re all set!

For Android

· Go to Google Play and download Google Authenticator. It’s free.

· Launch the app and tap the plus button.

· At the bottom of the screen, two options will show up. Select the option Scan the QR code.

· Scan the QR code displayed on your computer screen, on the iBanFirst account set-up page.

· If you have any issue with scanning the barcode, you can switch to the option Enter key manually and fill on your phone the information displayed on the computer screen.

· Fill in the 6-digits code that will be displayed in your authentication software and click Validate.

· You’re all set!

Resetting your authentication software

Contact your Account Manager who will reset your authentication software account registered in the platform.

Afterwards, login to the iBanFirst platform, and click on the button with your initials at the bottom-left corner of the page. Select Security.

There you will have the option to configure Google Authenticator.

Refer to the previous paragraph about Configuring your authentication software for set-up.

In this process, you will also be guided through the steps to configure your authentication software. To start with, you will be asked to select what kind of phone you’re using.

For Apple

· You will be prompted to download the authentication software (Google Authenticator or alternatively Authy) from the App Store. It’s free.

· Launch the app and tap the plus button.

· At the bottom of the screen, two options will show up. Select the option Scan barcode.

· Scan the barcode displayed on your computer screen, on the iBanFirst authentication software set-up page.

· Fill in the 6-digits code that will be displayed in your authentication software and click Validate.

· You’re all set!

For Android

· Download the authentication software (Google Authenticator or alternatively Authy) from Google Play. It’s free.

· Launch the app and tap the plus button.

· At the bottom of the screen, two options will show up. Select the option Scan the QR code.

· Scan the QR code displayed on your computer screen, on the iBanFirst authentication software set-up page.

· Fill in the 6-digits code that will be displayed in your authentication software and click Validate.

· You’re all set!

Troubleshooting authentication software issues

If the 6-digit Time-based one-time password (TOTP) generated by your authentication software is not being recognized by the iBanFirst platform, please check that the time parameters on your phone and computer are set to automated. This issue is indeed often linked to a bad synchronization between the time settings on the computer where you access the iBanFirst platform and on the phone where you authentication software is installed.

Did this answer your question?