The Auskey system for accessing the ATO Portals is being retired at the end of next month. After the 30th of March 2020 all Auskeys will expire and will no longer work. The new system is called Relationship Authorisation Manager (RAM). This is a quick guide on setting up RAM to access either the Tax Agent Portal or Business Portal.
Why is the ATO Introducing myGovID?
Modern security standards require multi-factor authentication to verify that the person who is logging in is who they say they are. AUSkey does not meet those standards, especially where an AUSkey is shared or attached to a desktop computer. AUSkey also has extensive browser compatibility issues, cannot be used on a mobile device, and has a difficult installation process.
Set Up Your Digital Identity
To access RAM you need a myGovID to login. myGovID is your digital identity which makes it easier to prove who you are online - it's like the 100 point ID check but on your smart device. Use your myGovID to log in to selected government online services. myGovID is different to myGov.
Three easy steps to set up your myGovID
1. Download the myGovID app
Click the icons below or search myGovID in the App store or Google play. myGovID is only available for Apple and Android phones and tablets at this time, they plan to add more in time. To use the myGovID app you must have an active internet connection.
2. Enter your details
Open the myGovID app and follow the prompts. You will need to enter your full name, date of birth and email address. The email you use should be a personal email address not a work address. It is not possible to change your email address at this time (your myGovID is yours as an individual and you may be granted access to various entities, personal and those associated with your work). You can only use identity documents once myGovID you can’t have multiple IDs.
3. Add your identity documents
The identity strength you require may differ depending on the government online service you want to access using your myGovID.
The ATO Portals requires Standard identity strength you need to add two Australian identity documents such as your:
driver’s license or learner’s permit
passport
birth certificate
Medicare card
If you want more info on myGovID check out https://www.mygovid.gov.au/.
Login To RAM & Link Your Entities
Login to RAM
Go to https://authorisationmanager.gov.au/#/login and login using your myGovID.
Go to Link your business and fill in your information and click continue. Follow the onscreen direction to link your entities such as trusts, companies, super funds, partnerships, or individual ABNs.
To be able to add your entities you need to be a Principal authority. The principal authority is a person responsible for the business, such as:
a sole trader
an eligible individual associate listed on an Australian business number (ABN) in the Australian Business Register (ABR) – for example a trustee, director, public officer, partner, or an office bearer of a club or association
a primary person (no individual associates listed in the ABR) who needs to manually link an ABN in RAM, such as
a government representative (authorised contact for a government agency, not including public schools)
an indirect associate (corporate trustee, deceased estate)
a responsible authority (company that uses an alternate director, association, not-for-profit or Australian charity, private or public school, including school council or board).
Manually link an ABN in RAM
phone 1300 287 539 and select option 3
you’ll need to provide personal details to complete a proof-of-identity check
checks will be completed to confirm your association to the business
once confirmed, you’ll receive an email with an authorisation code and summary of the authorisation request
log into RAM using your myGovID to accept the request and complete the link.
As the principal authority, you need to link your business in RAM before you can authorise others to access government online services on behalf of your business.
Authorised Users & Administrators
To start using government online services on behalf of a business a principal authority or authorisation administrator will need to authorise you to act on behalf of a business.
You’ll be emailed an authorisation request to become one of the following:
Authorisation administrator– a user who can create and manage authorisations for others
Authorised user– a user who can work on behalf of a business
Machine credential administrator (MCA) – a user who can create and manage machine credentials to interact with government online services through business software.
Basic user– a user who can work on behalf of a business with a basic identity strength in myGovID. They will need to be re-authorised every 12 months. This is only available for a small number of participating government online services.
The actions you can perform are based on the level of access you've been given. This is either:
Full access to selected government online services
Custom access to selected government online services (currently limited to ATO services), or
No access to selected government services.
Accepting an authorisation code
You'll receive an authorisation code and a summary of the authorisation request via email. Log in to RAM to accept or decline the request. You have seven days before the code expires. Once accepted, you can act on behalf of the business when accessing government online services. You can only have one authorisation for each business you are acting on behalf of. If you have an existing authorisation and accept a new authorisation request for the same business, this will override your existing authorisation.
Security
The Australian Government is serious about your safety and privacy online. You log in to RAM using a digital identity such as myGovID.
Together, RAM with a digital identity:
Protects your business, ensuring only you and authorised users can access a government online service and transact for the business
Gives greater assurance and visibility over who is transacting for your business, enabling you to remove or modify an authorisation at any time
Protects your identity data. The government online service can only identify who is making the transaction for the business, not your personal information.
Your information is controlled by you and protected by the Australian Government – ensure you regularly maintain your authorisations in RAM and remove authorisations immediately when they are no longer valid.
Staying safe online
Your personal information forms part of your identity. Here are some tips to stay safe online and protect your personal information:
Be cautious when clicking on hyperlinks embedded in SMS and emails. Do not click on links or attachments in emails from unknown sources.
Keep your personal information and passwords secure – don't share your password with others and change your passwords regularly.
Be aware of sharing your information, you should treat requests for personal information with caution. Never reply to emails with your password or other sensitive information – including to prospective employers.
Install anti-virus software on all devices and set the software to automatically check for updates on a daily basis.
Make data security an everyday priority, practice good cyber hygiene and constantly review your security habits.
Store personal information in a secure place. Make sure electronic documents containing personal information are secure and avoid carrying your birth certificate or passport in a wallet or handbag unless you need them.