Multi-factor authentication for FCA systems

See our guides on how to register and log in with multi-factor authentication in the resources section below. 
Note: you must register on the systems you need to access before you can turn on multi-factor authentication. Register for Connect, Reg Data, Online Invoicing and ESS. 

You can then authenticate with a one-time passcode when you log in, which will be generated from: 

• An authenticator app
• A text message     
• An automated phone call

If you’ve already registered, your existing account credentials and log in details will not change. Use these when you log in before you authenticate.

We recommend using the Salesforce Authenticator App. You can use other authenticator apps but FCA support teams may not be able to provide technical advice. 

Download the Salesforce Authenticator App for Android and IOS. Check the system/device requirements.

See our resources below on how to register or log in with an authenticator app.

You may need to turn on multi-factor authentication more than once if you access multiple systems. 

If you access Connect, Reg Data, and Online Invoicing you’ll need to log in with your existing credentials and turn on multi-factor authentication just once. 

If you also access ESS or SIS, you’ll need to register to turn on multi-factor authentication on both systems separately.

You should not share your log in details or use other users’ details to access FCA systems. See below for how to give access to third parties or compliance firms.

If you use compliance consultants to access Connect, Reg Data or Online Invoicing on your behalf, you’ll need to add them as firm users before they can turn on multi-factor authentication. Our guides below explain how to do this.   

• Adding a user for Connect   
• Adding a user for RegData  
• Adding a user for Online Invoicing

You can also share and collaborate in Connect with other registered users by transferring ownership of some applications and forms. Find out more.

Before you can turn on multi-factor authentication for Connect, Reg Data or Online Invoicing you must be a registered firm user if you access these systems on behalf of authorised firms. 

If you’ve already been set up as a firm user on the systems you need to access, you can turn on multi-factor authentication when prompted at log in. If not, ask your firm to add you. Our guides below explain how.   

• Adding a user for Connect   
• Adding a user for RegData  
• Adding a user for Online Invoicing

You can re-set or re-register for multi-factor authentication, for example if you change or lose your device. See our guide below.

Registering

I get an error message when I try to register

‘The number you have provided cannot be used for verification. Please choose an alternate number.’ 

The number registered may be deemed high risk or on a disallow list.

Try using an alternative number if you can or authenticating via an authenticator app. 

I don’t have sufficient storage space on my mobile to download the app 

Either free up space by deleting apps you no longer used and try to download the app again. Alternatively, set up multi-factor authentication using either SMS or voice call. 

I can’t scan the QR code  

Do not open your camera app and try to scan the QR code as it may not work.  Make sure to click on the ‘Scan QR code’ feature in your Authenticator app. Contact the system support team if the problem persists.

Logging in

I didn’t receive a one-time passcode via SMS.

Select the resend option from the registration and login screen. Contact the system support team for assistance if the problem persists.   

My app is not working/generating my 6-digit code 

Reset your multi-factor authentication. Delete or uninstall the app from your mobile device and register again. Contact the system support team if the problem persists. 

My 6-digit code from the authenticator app doesn’t work 

Verification codes refresh every 30 seconds, so you may need to make sure you haven’t exceeded the time-limit. Contact the system support team for assistance if the problem persists.   

I’ve changed/ lost my mobile phone

If you still have access to your old phone, login and reset your multi-factor authentication. You can then register your new device or number the next time you log-in. If not, contact your principal user, Administrator or the Supervision Hub to reset your multi-factor authentication in Connect, Reg Data or Online Invoicing. 

If you need to reset your MFA from the ESS, you can do this yourself or contact the ESS Support Team. Thereafter, you can then re-register the next time you log-in.

I want to change how I receive my one-time passcode

Reset your multi-factor authentication then register and choose a new mode of authentication when you next log in. 

I received an SMS text or voice call that I did not initiate

Do not open or use the code in any way. This may be a phishing attempt aimed at gaining access to your account. Contact the Supervision Hub.