2023



October 2019

What’s New

 

Introducing Multi-Factor Authentication in OneStop Reporting

To enhance user security in OneStop Reporting, we have made it possible to use Multi-Factor Authentication (MFA) when signing in to the portal.

MFA is an enhanced security system that verifies a user’s identity by requiring two or more forms of authentication. Rather than just asking for a username and password, MFA requires additional credentials, such as a code from the user’s smartphone.

MFA is an effective way to provide increased security. Usernames and passwords can be stolen, and they have become increasingly susceptible to brute force attacks. MFA creates multiple layers of security to help increase the confidence that the user requesting access is actually who they claim to be.

With MFA, even if an attacker manages to learn the user’s username and password, it is useless without also having possession of the additional authentication method. In OneStop Reporting, MFA works by requiring two authentication methods:

  • Something you know (username and password)
  • Something you have (an authenticator app on your mobile device)

 

 

What is an authenticator app and how does it work?

An authenticator app is usually installed on a smartphone and you scan a barcode or enter a key to create an account. After the account is created, the authenticator app generates a 6-8 digit passcode every 30 seconds. The passcode can, for example, be used for login as an extra authentication method in addition to a username and password.

The passcodes are generated from a secret code that is shared between the service you are using, such as OneStop Reporting, and your device, as well as the current time.

 

Google Authenticator app example

 

Where can I get an authenticator app and which one should I use?

There are a variety of authenticator apps you can download to your phone from Google Play and the IOS App Store, but we recommend that you use Google Authenticator or Microsoft Authenticator, as those are the ones we have fully tested our MFA solution on.

Authenticator apps in Google Play

For more information about installing and setting up an Authenticator app, see Install and set up an Authenticator app

 

How can I get MFA in OneStop Reporting?

In OneStop Reporting, users can set up MFA from their user settings. In addition, administrators can enforce an MFA policy for all end users. See the user procedures below for more information:

 

 

(Option 1) User enables and sets up Multi-Factor Authentication

  1. Take one of these actions:
    • Click Settings > User settings.
    • On the Home screen, in the upper right-hand corner, click User options > Profile.
  1. On the My profile tab, under Security, turn on the Enable Multi-Factor Authentication switch.
  2. Install an authenticator app on your mobile device.
    NOTE: You can, for example, use Microsoft Authenticator or Google Authenticator from Google Play or App Store.
  3. Scan the image on the screen into your authenticator app.
    NOTE: If you cannot scan the image, you can enter the code you see under If you are unable to scan….
  4. In the Code field, enter the code from your authenticator app.
  5. Click Verify.

 

You have now set up MFA for your OneStop Reporting user profile. The next time you log in to OneStop Reporting portal, you must enter your username and password, and then enter a verification code from your authenticator app.

Click here for video on how to set up MFA on your account:

 

 

User logs into OneStop Reporting with Multi-Factor Authentication

  1. In the Username/Email field, enter your email or username.
  2. In the Password field, enter your password.
  3. In the Verification code dialog, enter the code from your authenticator app.
  4. Click Verify.

If you do not have a verification code, click the Do not have a code? link to read more about the MFA setup.

 

 

(Option 2) Administrator at top level enables Multi-Factor Authentication (MFA) policy for all users

  1. Click Settings > Administration.
  2. On the Overview tab, under Security, turn on the Require Multi-Factor Authentication for all users switch.

NOTE: You can click the More information link to read more about Multi-Factor Authentication (MFA).

Multi-Factor Authentication (MFA) policy is now enabled for this organization. All users must use MFA to sign into the underlying tenants and groups.

 

 

User sets up MFA

If your administrator has enabled a Multi-Factor Authentication (MFA) policy for your organization, you will receive a message:

Your organization’s security policy requires you to set up Multi-Factor Authentication (MFA) for your account.

  1. Click Next.
  2. Install an authenticator app on your mobile device.
    NOTE: You can, for example, use Microsoft Authenticator or Google Authenticator.
  3. Scan the image on the screen into your authenticator app.
    NOTE: If you cannot scan the image, you can enter the code you see under If you are unable to scan….
  4. In the Code field, enter the code from your authenticator app.
  5. Click Verify.

 

 

You have now set up MFA for your OneStop Reporting user profile. The next time you log in to OneStop Reporting portal, you must enter your username and password, and then enter a verification code from your authentication app.

 

User logs in to OneStop Reporting with Multi-Factor Authentication

  1. In the Username/Email field, enter your email or username.
  2. In the Password field, enter your password.
  3. In the Verification code dialog, enter the code from your authenticator app.
  4. Click Verify.

If you do not have a verification code, click the Do not have a code? link to read more about the MFA setup.

 

Administration: Changes to Group User permissions

We have added an option in Administration for Group Users, so that users can be added with full access permissions in all subtenants (data access, drilldown, etc.) without being administrators.

The three options for Group Users are now:

  • If you want to grant a user Group Administrator rights, turn on the Group Administrator switch. A Group Administrator can manage group users, and create new tenants and subgroups. In addition, they can manage licenses for users and manage the connections for the tenants in the group.
  • If you want to grant a user rights to manage users only for the tenants in the group, turn on the Manage users switch. This permission allows the user to see the Administration pages for the tenants in the group. Users with this permission will also automatically get All permissions.
  • If you want to grant a user all permissions for all tenant in the group, turn on the  All permissions switch. This permission gives the user all Access Permissions in the tenants, such as full data access, importing company data, drill-down, etc. without having administrator rights. These users will not be able to see the Administration pages under Settings.

 

 

Assignments: Download budget from assignment

It is now possible to download a budget as an Excel file from an assignment in Assignments. The Download functionality is available both for single assignments from Budgeting and assignments in a workflow.

 

Fixes

 

Assignments

We have fixed an issue where some users have experienced getting error messages when selecting parameters for their assignments (when the Let User Decide option is selected for parameters in Workflow).

 

eLearning

We have fixed an issue that would cause some users not to be able to log in to the eLearning portal.

 

Integration-specific fixes

 

PowerOffice GO

  • Added Parent.Department and Parent.Location to the Project dimensions.
  • Fixed an issue where import would fail for Customer on Recurring Invoice.
  • Added Vat Number to Companies for Group Reporting so users can get Company Id in reports.
  • Changed order for drill-downs in reports: We have changed the order of the voucher links to always be displayed in the first column.

 

QuickBooks

  • Fixed an issue where accounts were stored as blank when using subaccounts.
  • Fixed an issue where General Ledger reports would fail on import.

 

VismaNet

  • Added attributes Quantity and Inventory Number to Journaltransactions. In this way, users can create reports that extract cost per item.
  • Fixed an issue with Customer Invoices where some users have experienced to receive duplicate values.

 

VismaBusiness

  • Added Capital Asset Transactions to group reporting.

 

Visma eAccounting

  • Fixed an issue with Supplier truncate error.