Hi everyone, Update 19/12/24 - Are you still there? Hello Community members and followers of this security updates thread! Its been a few days since we last spoke. There is a great update co...
Updated 5 days ago
Version 10.0
Blog Post
Looks like this might be an Australia ATO request, But NZ IRD have not push for it - so can you set it for NZ customer to have the option to opt in or out or set the time before inactivity log out kicks in?
Hey LAP-BP
This idea has been mentioned a few times on our Ideas Exchange however it's unlikely that we'll explore an opt-in, opt-out option as this is a mandatory change. Feel free to reach out if you have any more questions.
AmandaCL This is a mandatory change for Australia Only so why throw your New Zeeland customers under the bus? Or is your Infrastructure really that inflexible?
While I understand the principle about what the ATO are demanding, the seem to go a bit far... aannddd.... the ATO has no say on New Zeeland policy so why anger all of your customer base instead of just the Australian side with overly zealous changes?
MYOB Really knows how to shoot itself in the foot when it comes to their customers...
Totally agree - NZ is not under ATO. Plus I have the windows operating system time out, so if I walk away from my desk I either lock the PC or it will automatically do it after 15 minutes, this is all the additional security we need - if this ATO is really concerned about some companies then they should do audits and identify fraud that way, as any user/or someone jumping on can and will do it no matter what level of security you impliment.
I reckon the reason for the ATO mandating the changes is thanks to the Optus hack (It wasn't a hack it was Optus leaving their database open to the world wide web...) but the problem is MYOB are inept.... Their log-in process was already flawed (Slow, Multiple click for no reason, no SSO, no SAML, prone to infinite re-directs forcing you to use another browser) ... and instead of using this as an opportunity to improve it... they threw their customers under the bus (including NZ customers).
If they had SAML auth or and App Like Xero Verify I reckon the outrage would have been mitigated greatly...
MYOB's problem is they have been reactive over the past 3-4 years and not proactive.
Hey AmandaCL pretty sure LAP-BP is in NZ, and therefore just asking for a consideration for NZ customers - as I am too - I am being inundated with complaints and queries from my clients definitely NOT wanting this feature - as we are not in Australia and therefore do NOT need to comply with ATO mandates. The 2FA every 24 hours is enough.
