Hi everyone, Update 19/12/24 - Are you still there? Hello Community members and followers of this security updates thread! Its been a few days since we last spoke. There is a great update co...
Updated 5 days ago
Version 10.0
Blog Post
Hey LAP-BP
This idea has been mentioned a few times on our Ideas Exchange however it's unlikely that we'll explore an opt-in, opt-out option as this is a mandatory change. Feel free to reach out if you have any more questions.
AmandaCL This is a mandatory change for Australia Only so why throw your New Zeeland customers under the bus? Or is your Infrastructure really that inflexible?
While I understand the principle about what the ATO are demanding, the seem to go a bit far... aannddd.... the ATO has no say on New Zeeland policy so why anger all of your customer base instead of just the Australian side with overly zealous changes?
MYOB Really knows how to shoot itself in the foot when it comes to their customers...
Totally agree - NZ is not under ATO. Plus I have the windows operating system time out, so if I walk away from my desk I either lock the PC or it will automatically do it after 15 minutes, this is all the additional security we need - if this ATO is really concerned about some companies then they should do audits and identify fraud that way, as any user/or someone jumping on can and will do it no matter what level of security you impliment.
I reckon the reason for the ATO mandating the changes is thanks to the Optus hack (It wasn't a hack it was Optus leaving their database open to the world wide web...) but the problem is MYOB are inept.... Their log-in process was already flawed (Slow, Multiple click for no reason, no SSO, no SAML, prone to infinite re-directs forcing you to use another browser) ... and instead of using this as an opportunity to improve it... they threw their customers under the bus (including NZ customers).
If they had SAML auth or and App Like Xero Verify I reckon the outrage would have been mitigated greatly...
MYOB's problem is they have been reactive over the past 3-4 years and not proactive.
This should ONLY be activated when you are processing a payroll and uploading the payroll information to the ATO. All you are asked is "if you are the employee or an accountant. This should be when you are asked for the 2FA factor.
NOT EVERY MYOB FILE ALL DAY! EVERY DAY! KICKING PEOPLE OFF AND MAKING THEM SIGN BACK IN. NUTS!
