It is recommended that the following transcript is read alongside the PDF document that contains the relevant slide numbers, and corresponding visuals.
Hi Everyone, My name is Lucy and I am from the Data Exchange Policy and Engagement Section.
Today I will be taking you through myGovID and RAM that are replacing AUSkey.
Acknowledgement of country:
Before we begin, I would like to acknowledge the traditional owners and custodians of the land on which we meet today and pay my respects to their elders past and present.
In this session we will be discussing the following topics:
What is myGovID.
Using Relationship Authorisation Manager, known as RAM, to manage access.
As well as accessing the Data Exchange with myGovID.
So why is AUSkey being replaced?
AUSkey is reaching its end of life. The background architecture is not being updated and a new solution is required. As well as to take advantage of improved security options such as facial and finger print recognition. AUSkey is being replaced to make authentication mobile, instead of downloading an electronic key to a computer or a USB drive.
There are 3 basic steps to follow:
Firstly, get your myGovID
Secondly, link your myGovID to your ABN in RAM
And lastly, login using your myGovID credentials
We will now have a look at what myGovID is and what it isn't.
Firstly, myGovID is different to myGov.
myGovID is used to access business and tax services, based on the businesses you are authorised for in RAM. In future you will be able to use myGovID to access individual services.
Whereas myGov provides individuals with access to their information on government services online, such as Medicare and Centrelink.
myGov cannot be used on behalf of employers.
It is critical that all service providers and their staff are fully transitioned to new authentication arrangements by the 27th of March 2020. After this time you will no longer be able to use AUSkey to log in.
This includes anyone who currently uses AUSkey to access the Data Exchange or the Grant Recipient Portal.
myGovIDis an identity proofing and authentication service that allows you to prove who you are online. myGovID can be used to access government IT systems (including the Data Exchange) on behalf of your employer.
myGovID belongs to you and cannot be shared.
You can only have one myGovID as it is unique to you but you can use it on multiple devices.
myGovID uses the security and identification features in your smart device, such as password, facial or fingerprint recognition.
How secure is myGovID?
The Australian Government is serious about your safety and privacy online. When using government online services, your personal information won't be shared without your permission – putting you in control.
myGovID uses encryption and cryptographic technology as well as the security features in your device, such as fingerprint, face or password. This is to protect your identity and help stop other people accessing your information.
myGovID is accredited under the Australian Trusted Digital Identity Framework which strictly controls how your identity data is collected and stored.
As well as the Gatekeeper Public Key Infrastructure Framework which governs how the Australian Government uses digital keys and certificates to assure the identity of subscribers to authentication services.
Everyone who needs access to the Data Exchange portal or other services that used AUSKey will need a myGovID.
To get your myGovID you will need your own compatible smart device such as an Apple with iOS 10 or later or Android 7 or later.
There are 2 levels of Identity strength you can have.
Standard and basic.
The identity strength you require may differ depending on the government online service you want to access using your myGovID.
Standard identity strength means you have set up your myGovID with at least two Australian identity documents.
A valid Australian Passport or licence are mandatory, together with one other identity document.
Other forms of ID include a birth certificate or a Medicare card
If you don't have any of these forms of identification, you can still get a basic myGovID. You will need to be authorised through RAM by the principal authority.
The Basic identity strength means you have set up your myGovID with only one or no Australian identity documents and therefore are unable to achieve Standard identity strength.
Depending on the government online service you are accessing, you may need to meet additional eligibility requirements when using a Basic myGovID.
The Department of Social Services will accept both basic and standard myGovID.
Firstly, download the myGovID app.
Secondly, get up your myGovID, you will be asked to enter an email address. As this is your personal credential, this should be a non-work email address.
Thirdly, add your identity document details to obtain a standard identity strength.
And then you're finished setting up.
Remember, your identity documents are not required to obtain a basic strength myGovID.
You will need to add your staff to your ABN through the Relationship Authorisation Manager.
Relationship Authorisation Manageris an organisation-level authorisation service.
It allows you to:
Link each of your staff myGovIDs to an Australian Business Number (ABN); and to manage who can act on behalf of your organisation online.
To get started, the Principal authority of the business needs to create a relationship with the ABN by linking their own myGovID to the ABN in RAM.
Once they have established their relationship as a principal authority, they can grant and manage authorisations for other staff in RAM to work on behalf of the business or delegate someone else to do this.
The myGovID website contains a lot of information about the new authorisation method that will be used.
As the principal authority, you need to link your business in RAM before you can authorise others to access government online services on behalf of your business.
The Principal Authority is a person responsible for the business such as:
an eligible individual associate listed on the Australian business number (ABN) in the Australian Business Register (ABR) – for example a trustee, director, public officer, partner, or an office bearer of a club or association;
Or a sole trader or a primary person.
There are a number of actions an eligible associate can perform including:
Adding new staff
Removing staff if they no longer need access, i.e. they left the organisation, they changed the role or they were only employed for 6 months at a time for example.
Set time limits on access if appropriate
And renew access for staff as required.
Setting up is different depending on your role:
A Principal authority is someone who is a business owner or listed associate. They Can appoint an Authorisation administrator.
An Authorised user is someone who acts on behalf of a business.
Or a Business software user or provider is someone who uses system to system software.
There is no limit to the number of associates listed on the ABR for an ABN and each eligible associate can claim the Principal authority in RAM if they choose.
A public officer is a company's representative to the ATO and is responsible for the company's tax obligations. They are recorded on the ABR with as the public officer and considered an 'eligible associate'. They are able to claim the principal authority in RAM.
I will now play you this quick video.
I will now step you through the steps from the video on how to accept your authorisation in RAM.
To begin, go to authorisationmanager.gov.au
On the Welcome page, select 'Login with myGovID'.
You will be redirected to the myGovID portal. Enter your myGovID email. This is the email address you used to register for your myGovID.
A code will appear on the screen. Be sure to have your smart device close by as this code only lasts for 60 seconds. Launch the myGovID app on your smart device, login if required and accept the code.
You will also receive an email with a 6 digit code which is case sensitive.
Return to the authorisation manager where you will enter you authorisation code and click Submit.
This code is valid for 7 days.
Review the details and select the checkbox to declare you understand and accept.
Your myGovID is now linked to the business in RAM.
So just to reiterate
Log into RAM by entering the 4 digit code into your myGovID app.
Then enter the 6 digit code from your authorisation request email into the box titled 'Enter an authorisation code' then select submit.
And lastly, review the summary of the authorisation and select check box to accept declaration, then select accept.
After you have accepted the request, your myGovID is authorised and you can start using myGovID to access the Data Exchange and other services.
Once you have accepted the authorisation on the first occasion, the process will be shorter each time.
From the Data Exchange website, select the Portal Login as normal.
If you have the fingerprint sensor set up on your phone you may be able to use your fingerprint to accept the code in the myGovID app instead of entering the code every time.
If you turn notifications on for your myGovID app, a notification will appear on your phone when you go through this process. This will save you having to search for the app each time.
Select the myGovID login
The first time you do this process you will need to enter your email address and a code.
You can follow the link to download the myGovID app from this page or if you have already done this step, enter your email address.
You can also click the 'remember me' option if you are using a computer that you often use.
A code will appear on your phone and computer – if the codes match, accept the code on your phone.
Remember, this code only lasts for 60 seconds.
The first time you log in, your browser will redirect to DSS services where you will see the Request an activation code to access the Data Exchange screen.
Enter the email address that is linked to your Data Exchange user profile. If you are unsure what this email address is, check with your Data Exchange Organisation Administrator.
An email, similar to the one for the RAM authorisation will be sent to you and this screen will change to Activation Code field, retrieve your code, return and enter this code and press continue.
You will then be taken into the Data Exchange portal.
If you used the same PC and clicked remember me, you will be taken straight to the confirmation screen.
So, just to reiterate
Firstly, go to the Data Exchange Portal.
Select the myGovID sign in option.
Enter your myGovID email address.
Accept the code in the myGovID app.
The request activation code for DSS DEX screen will appear.
Enter the email address associated with your DEX user ID.
Receive the authorisation code.
Enter the code on the next screen.
And enter the Data Exchange.
For each subsequent login you will select the myGovID sign in option, accept the code in the myGovID app and enter the Data Exchange.
Thank you for listening today.
For further information, visit the myGovId and RAM websites.