Hi everyone, Update 19/12/24 - Are you still there? Hello Community members and followers of this security updates thread! Its been a few days since we last spoke. There is a great update co...
Updated 4 days ago
Version 10.0
Blog Post
MikeG1Is the 20-30 mins inactivity sign out an ATO thing as well? Daily 2FA is a good idea, but whoever decided the 20-30 mins of inactivity sign out should reconsider their employment.
Do I need to berate the ATO or MYOB to make sure this doesn't happen?
It definitely seems to be an MYOB requirement because it's not mentioned here
https://softwaredevelopers.ato.gov.au/RequirementsforDSPs
My company is still using the desktop verion with the files cloud based so we fall under category D. The only API is the payroll reporting to the ATO which is part of the program.
Hi MickyH75 , you can see more from the ATO here, this is linked in our help guide for Australian customers as well (here)
https://softwaredevelopers.ato.gov.au/operational_framework/further-guidance-requirementsHi MikeG1 ..... the next bullet point says
so let's go with "remember me on this device" for 24 hours!!!
It seems you are bowing down to ATO bullying. I would hope that strong objections to this be made, fine for payroll type things as I have already mentioned, but for general accounting / inventory functions, it strikes me as bureaucratic 'look we are doing something'.
David
Hi David2ayo
You might find this article interesting, esp with regard to the ATO's role in this saga.
Regards
Gavin
Spot on MickyH75 👌👌
