Hi everyone, Update 19/12/24 - Are you still there? Hello Community members and followers of this security updates thread! Its been a few days since we last spoke. There is a great update co...
Updated 4 days ago
Version 10.0
Blog Post
If the ATO has only mandated 24hour login verification then why has MYOB decided to make us re-login after 30 minutes of inactivity? Who made this business decision and are they looking at this forum to see why this is unworkable for businesses? Can this be removed please?
HI sarahrigright , both the 24hr 2FA and the 30minute inactivity are requirements that MYOB has implemented in consultation with the ATO
You can find the information on their website here (and a sample screenshot below for you)Mike, you keep regurgitating this note along with others. However, you are missing the point. The ONLY reason this is affecting end users going by your logic is because MYOB is deemed a SaaS product. The ONLY reason it can be deemed a SaaS product is if the datafile is online. MYOB made the decision to force everyone to put their file online when we switched to STP phase 2. And if you allow us to take our files offline and only log in to lodge STP like we used to in phase 1, most if this problem would go away.
It also comes down to the definition of control.
https://softwaredevelopers.ato.gov.au/RequirementsforDSPs
I believe that anyone who uses the desktop application falls under category D as access to the product is controlled by the client and therefore shouldn't be subject to any of these requirements even if the files are cloud based.
You could also argue that MYOB is a Commercial product therefore falls under category E. If it weren't commercial there wouldn't be as many users.
