You can enable two-factor authentication (2FA) for individual employees that your clients employ. This means those employees must enter a one-time passcode as well as their login details when they log in.

If required, you can reset 2FA for an employee if they're having issues logging in using 2FA. For example, if they no longer have access to the device their 2FA is set up on, or they've lost their recovery code.

This reset clears the existing 2FA settings for the selected employee(s) and requires them to re-enrol for 2FA the next time they log in to Online Bureau (known as Sage Employee Online Services to your client and their employees).

1. Log in to the relevant company in Online Bureau.
2. Click Employees, then click View employee list.
   
   
   
   
3. Click Manage employee two factor authentication.
   
   
   
   
   
4. Select the relevant employee, then click Reset 2FA.

As long as the employee is selected to require using 2FA, the next time they log in they're prompted to re-enrol for 2FA again.        

Multiple employments

In some cases, an employee may use the same email address under a second employment with another company that also uses Sage Online Services.

2FA applies to the email address, not to a company. If you enable or disable 2FA in an employment that you process, this setting applies to other employments under the same email address.

 NOTE: If you need to avoid this for any reason, you can set the employee up in Online Bureau with a different email address.