Why is the ATO moving to a digital identity solution for the tax profession?

A single password system like AUSkey won’t meet this important increase in security standards, especially where an AUSkey is shared between multiple users.


In late March 2020, AUSkey will be decommissioned and the ATO will no longer support a desktop or browser based solution where access is granted to a device, rather than a verified person.They will be replaced with myGovID and Relationship Authorisation Manager (RAM), which together will give you a secure, simple and flexible solution for accessing Online services for agents.


To set up myGovID and RAM for your practice, you’ll need the Principal Authority (the listed associate(s) on the ABR) to establish their own myGovID and link to the practice ABN. They (or you if you are the Principal Authority) can then authorise users through RAM and create access permissions personalised to staff and what access they need to do their jobs. A step-by-step guide is available at https://www.ato.gov.au/TPmyGovID.

You’ll also be able to access myGovID on more than one personal device. If your phone is lost or stolen, myGovID can easily be downloaded again on your replacement phone the same way that you would add other apps that you regularly use like your banking or your social media apps.

To assist you to make the transition, we have a range of support materials available. We’ve just launched a new page myGovID and RAM for tax professionals which includes a factsheet to help you and your practice make the move.

ref:https://www.linkedin.com/pulse/why-ato-moving-digital-identity-solution-tax-colin-walker/

Create new authorisations – Authorised Administrator

If you are an Authorised Administrator and you are authorising other users, this explains how to create new authorisations. You can also import AUSkey users.

Video on how to authorise on the link below.

https://www.ato.gov.au/general/online-services/tax-agents/mygovid-and-ram-for-tax-professionals/authorised-administrator-move-from-auskey/authorised-administrator---authorise-other-users/create-new-authorisations---authorised-administrator/

Authorisation Administrator or Authorised User

You can appoint a business representative to be either an Authorisation Administrator or Authorised User. Both types of roles will enable the business representative to act on behalf of the business when using government online services. The main difference is that an Authorisation Administrator can also manage (create/view/edit/remove) authorisations.

In addition, both Authorisation Administrators and Authorised Users can also become Machine Credential Administrators.

Ref: https://www.ato.gov.au/general/online-services/tax-agents/mygovid-and-ram-for-tax-professionals/authorised-administrator-move-from-auskey/authorised-administrator---authorise-other-users/create-new-authorisations---authorised-administrator/

How to accept an authorisation in Relationship Authorisation Manager or RAM.

To accept your authorisation, you need to be a business representative who has a received an authorisation email and created their myGovID.

The authorisation email contains a 6-digit code which you’ll need to accept your authorisation.

The email also contains the code’s expiry date which is set to 7 days after the email is sent. If the code has expired, ask the person who authorised you to re-issue the code in RAM.

Note that the authorisation email will be sent to the email address provided by the person who authorised you, and this may not be the email you used to create your myGovID.

You will also need to ensure you have the appropriate myGovID identity strength for the user type you have been authorised for or you will not be able to accept the authorisation request.

You have a Standard identity strength if you’ve verified your identity in myGovID with at least two Australian government-issued identity documents. On the home screen of the myGovID app you should see your identity strength listed as Standard.

Standard identity strength users can only accept authorisations for Standard users.

You have a Basic identity strength if you haven’t verified your identity in myGovID.

On the home screen of the myGovID app you should see your identity strength listed as Basic.

Basic identity strength users can only accept authorisations for Basic users.

o begin, go to https://authorisationmanager.gov.au

Select ‘Login with myGovID’

Enter your myGovID email.

A code will appear on the screen. Launch the myGovID app on your smart device and enter the code.

Enter the authorisation code sent to your email and click Submit.

Review the details and select the checkbox to declare you understand and accept.

Then click Accept.

You can now start using myGovID to access participating government online services on behalf of the businesses you’re authorised for in RAM.

Thank you for watching.

For more information, visit the RAM and myGovID website.