Help & support
What is Multi-Factor Authentication (MFA)?
Multi-Factor Authentication, or MFA, adds an extra step to help verify your identity when you log on.
For CommBiz Administrators, this means entering your usual User ID and Password, then authenticating using CommBiz Mobile (eToken) or a physical security token.
This additional check helps reduce the risk of unauthorised access if a password is lost, stolen or compromised.
What's changing for Admins
MFA at log on will apply to all CommBiz users with Administrator permissions.
Today, CommBiz Administrators use their eToken or physical token to authenticate before accessing Admin functions. With MFA at log on, you'll use your eToken or physical token when you log on to CommBiz. Once you’ve authenticated when logging on, you won’t need to authenticate again when accessing tasks in the Admin hub.
Why are we making this change?
Administrators have access to sensitive functions such as managing users, permissions and service settings. Introducing MFA at logon adds an extra layer of protection upfront, helping reduce the risk of unauthorised access to your CommBiz service.
Moving authentication to logon also makes the experience simpler. Once authenticated, Administrators can access Admin tasks without needing to verify their identity again during the same session.
How to be prepared
Taking a few simple steps now can help you stay ready for MFA at log on and avoid disruption to your CommBiz access.
Check all Admins have an active security token
As an Admin, you’ll need an eToken (in CommBiz Mobile) or a physical token to complete MFA when you log on. Learn more about Security Token options.
To register for CommBiz Mobile, you'll be sent a one-time NetCode by SMS. Make sure your mobile number is up to date in CommBiz.
Review your Administrator access
If you no longer perform Admin functions for your service, you can speak to your Service Administrator about updating your roles and removing Administrator permissions. Learn more about managing user profile permissions.
Keeping your access and contact details up to date will help you prepare for the change and keep your CommBiz service secure.
Security token options
If you already use a CommBiz security token, you can continue using it for MFA when you log on. Need a Security Token? You can choose from one of the following options.
e-Token (CommBiz mobile)
An eToken is one security method for multi-factor authentication. Once activated in the CommBiz Mobile app, your eToken generates a one-time password when you need to authenticate.
Physical tokens
A physical device we send you. This generates a one-time password on the device screen for you to enter.
Broader changes coming to CommBiz
Get ready for the new CommBiz - Powerful. Simple. Secure.
Soon you'll see a redesigned homepage, simplified payments and Admin experiences, new insights and advanced security. Built with security at its core, CommBiz is introducing enhanced logon protection for Admins to help protect your CommBiz service from unauthorised access.
In the coming months, we will introduce MFA to CommBiz at logon for all users, along with additional authentication options. MFA is being introduced in stages, so you may not see the change straight away. We will provide more information, including timing for you, closer to the date.
FAQs
Frequently asked questions about the changes coming for Admins
Multi-Factor Authentication, or MFA, uses more than one way to verify your identity.
When you log on to CommBiz as an Administrator, you’ll enter your User ID and Password, then authenticate using CommBiz Mobile (eToken) or a physical token.
This helps reduce the risk of someone accessing CommBiz using a stolen or compromised password.
Yes. Once MFA applies to your service, users with an Administrator role will use their security token each time they log on.
Administrators can manage users, permissions and service settings.
Requiring MFA when Administrators log on helps protect these functions from unauthorised access. It also means Administrators will not need to authenticate again when accessing Admin tasks during the same session.
Any user with Admin role permissions will soon be required to use their security token to complete MFA at every logon. To check your role permissions, go to Admin, select My profile, then Permissions Mode.
If you don’t have Administrator permissions, MFA changes for other CommBiz users will be introduced in a later stage. We will provide more information, including timing for you, closer to the date.
Yes. If you currently use an eToken or physical token, continue using it as normal. Your existing security token can be used for MFA when you log on.
Contact your Service Administrator, they can help unlock your profile or reset your password.
If you are the only Administrator and cannot log on, contact the CommBiz Helpdesk on 13 2339.
Administrators can reset a user’s password and that a temporary password must then be changed by the user. Learn more about how to reset your CommBiz password.
Ask a CommBiz Administrator for your service to arrange a replacement token.
You can also consider moving to CommBiz Mobile (eToken). If eToken is disabled on your CommBiz service, the error message ‘Your service is not eToken enabled’ will show during CommBiz Mobile registration and you won't be able to continue.
To enable eToken, an Administrator will need to call us on 13 2339.
No. Once you authenticate when you log on, you will not need to authenticate again when accessing Admin tasks during the same session.
Check that your security token is active and accessible, your contact details are up to date, and you still need Administrator permissions.
You can make sure Administrator access is still required and that Administrators can access their authentication method when needed.
Ask a Service Administrator for your CommBiz service to review and update your roles.
A Service Administrator can edit user roles and permissions in CommBiz. Your service must continue to have at least one Administrator.
You will not be able to log on to CommBiz once MFA applies to your service.
Set up CommBiz Mobile (eToken), arrange a physical token, or ask your Service Administrator to remove your Administrator permissions if you no longer need it. Learn more about managing user profile permissions.
Yes. CommBiz will soon introduce additional ways for users to authenticate, including Passkeys and approval through CommBiz Mobile.
We’ll provide more information about available options and how to set them up closer to the date.
