Help Center › Signing In

Signing In

All Access IDM uses two-factor authentication. If you've registered a security key, that's all you need — the sign-in page leads with it and one tap signs you in. Otherwise you'll need your email address, password, and a one-time code from your authenticator app.

Sign in with your authenticator app

  1. Go to the sign-in page and enter your email address and password, then click Sign In.
  2. Open your authenticator app (Google Authenticator, Authy, Microsoft Authenticator, or similar) and find the All Access IDM entry.
  3. Enter the current 6-digit code and click Login.
Note: Codes are time-based and expire every 30 seconds. If a code is rejected, sign in again from the start — email and password — then enter the next code. An account allows 10 successful password sign-ins in any 15 minutes, and 10 incorrect passwords for an address in 15 minutes pause sign-in for it; either way, wait 15 minutes and try again.

Completing setup after you're added as a user

  1. Follow the link in your welcome email and set your password.
  2. If a mobile number is on file for you, you'll be sent a text message with a 6-digit code — enter it to continue. If not, enter the activation code your administrator gave you (see below). If you created your organization's account yourself and gave no number, you go straight to the next step.
  3. Scan the QR code shown with your authenticator app, then enter the 6-digit code it displays and click Activate to finish setup.
  4. Save the recovery codes shown next — they are shown only once. See Authentication App.
Didn't get the text? You can request one resend. If you still don't receive it, use the Notify My Admin option on that screen — if your account is the only one in your organization so far, double-check the number you entered instead, since there's no other admin yet to notify. If the number was wrong, you can enter a new one there. Tick the box agreeing to receive security codes by text at it, or the new number is not saved.

Signing in with an activation code

You are given an activation code when your administrator resets your sign-in, or adds you without a mobile number. If you were added without one, you enter it twice: when you set your password from the welcome email, and again at your first sign-in.

  1. Your administrator gives you a one-time activation code in person, by phone or by chat — never by email.
  2. Sign in with your email address and password as usual. Instead of a text message, you are asked for the activation code. Enter it (capitals and dashes are optional).
  3. Scan the QR code with your authenticator app, enter the 6-digit code it shows, and click Activate. Then save the new recovery codes you are shown.
Note: An activation code works once, for 24 hours. If yours has expired, or you started setting up your authenticator and didn't finish, ask your administrator to reset your sign-in again. Until your new authenticator is set up, text-message sign-in is turned off for your account; if you have also forgotten your password, reset it as usual and enter the activation code when asked.

Sign in with a security key (WebAuthn)

  1. Enter your email address and password, then click Sign In.
  2. When the code prompt appears, use your registered security key when your browser prompts you.
  3. You are signed in immediately — no code to type.
Tip: Security keys must be registered before use. See Security Keys (WebAuthn) to set one up.

Forgot your password?

  1. On the sign-in page, click Forgot Password.
  2. Enter your email address and submit the form.
  3. Check your email for a reset link and click it.
  4. Enter a new password. Passwords must be at least 12 characters and include an uppercase letter, a lowercase letter, a number, and a special character.
  5. Enter the 6-digit code sent to you by text message to finish — or click Use a recovery code instead and enter one of your recovery codes. With no mobile number on file, enter the 6-digit code from your authenticator app instead (or a recovery code).
Note: Reset links expire after a limited time. If yours has expired, start the process again.

Lost access to your authenticator app?

  1. Sign in with your email address and password as usual. On the page that asks for your code, click Lost Token?.
  2. Enter your email address and submit.
  3. Click the recovery link in your email and enter your email address and password.
  4. You'll be sent a text message with a 6-digit code — enter it to continue. Or click Use a recovery code instead and enter one of your recovery codes. With no mobile number on file, a recovery code is the only way through here; if you have none left, ask your administrator to reset your sign-in.
  5. Scan the new QR code with your authenticator app, enter the 6-digit code it shows, and click Activate.
  6. Save the new set of recovery codes shown next. Your old codes stop working.

Your old authenticator entry keeps working until you click Activate, so nothing is lost if you stop partway through.

Note: Recovery is only for an authenticator you have set up before (or if you're still the only user on a brand-new account). If you never finished setup and someone else on your account already has, there is nothing to recover: no recovery email is sent, and the system tries to notify your administrator instead (at most once an hour, and only if your account has one). If you don't hear back, contact your administrator directly. The page still says instructions were sent — it gives the same answer for every address, so it never reveals which accounts exist.
Tip: Register a security key and it becomes your normal way to sign in — the sign-in page leads with it, it's the fastest option, and it's resistant to phishing. See Security Keys (WebAuthn).

Don't have an account?

The sign-in page carries a Create an account link, but it is for an institution that is new to All Access IDM — it starts a fresh subscription for a bank or credit union that does not have one yet.

If your institution is already a customer, do not use it. Signing up again creates a second, separately billed account for the same institution rather than giving you access to your colleagues' data. Ask an administrator at your organization to add you as a user instead — that is the only route that puts you inside the account your institution already has.

Light and dark mode

All Access IDM follows your device's light or dark setting. To choose one yourself, sign in, click the gear icon to open Account Settings, and under Appearance pick Light, Dark or Auto (follow the device). The choice is remembered in that browser. Printed reports are always light.