MOBILE: Multi Factor Authenticator (MFA)

As an added layer of security, AMS applies Multi-Factor Authentication (MFA) to all accounts. 

The extra layer of authentication increases confidence that the user requesting access is on a device they trust and are who they claim to be. Once set up, this is a very reliable way of making sure that you're able to complete AMS authentication.

Multi-factor authentication is enabled for you to authenticate certain actions (like logging in or updating your account) by providing a code. By default AMS will be set to send you MFA codes via a text message. There are two possible methods;

1. You can receive an SMS with a six-digit code or,
2. You can set up an authentication app to automatically generate six-digit codes. eg. Google Authenticator or Microsoft Authenticator.

If you have not previously selected your preferred multi-factor authentication method, you will be prompted to do so the first time you log into AMS. More detailed information on both of these options below.

Authentication is done on a device-by-device basis, so if you’re using two devices, such as a computer and a phone, you’ll need to authenticate them separately.

Any time you need to authenticate your AMS account, you’ll need to enter a code.

• If you are using the SMS method, enter the code you receive into AMS.
• If you are using the Google Authenticator method, open Google Authenticator on your mobile device and enter the code it displays into AMS.

Note that the codes used by both methods expire within a short time period and each code can only be used once.

Selecting between MFA Code Methods

Simply choose the method you prefer and follow the prompts. We recommend the Authentication Application method for ease of use.

If you need to change your authentication method after this initial setup, please email ams@ausport.gov.au and they will reset your preference.

Authentication via Authenticator App (e.g. Google Authenticator) 

First you will need to get the Authenticator application

1. Using your mobile device, go to the App Store (for iOS devices) or the Play Store (for Android devices).
2. Search for and locate the Authenticator application. eg.Google Authenticator.
3. Install the Authenticator application on your mobile device

Select "Authenticator App"

Now follow the prompts. Either get the secret key automatically added to your Authentication app or simply copy and paste it in. 

Once you get the Secret key to connect your AMS to the Authentication App, the Authentication App will now start to generate random 6 digit MFA codes for you to type into your AMS App and verify your login. 

Authentication via Text Message (SMS)

You will be sent a 6 digit code 
This code is sent to your accounts mobile number nominated in the registration process. 

If you want to authenticate via SMS you'll just need to follow the prompts. See below.. 

Select "SMS Text Message"

Now confirm your mobile number is correct by pressing 'Next' or you can change your mobile number and update it accordingly then press 'Update'. Once you confirm your number, a MFA code will be sent to your device to verify your login. 

Back Up Codes

You will be prompted to then save your back up codes. When you first set up MFA, you’re provided with 10 backup codes. You should use a backup code if you can’t receive an MFA code because you don’t have access to your usual authentication method (for example, your phone battery is flat). Each code can only be used once.

We recommend saving your back up codes in a safe place by taking a screen shot on your mobile or copying them to the clipboard and pasting in your notes or email. 

Once a backup code is used, you should remove it from your saved list. Note that because the backup code is for single use only, logging in with one does not register your device. On your next login, you will either need to use your usual authentication method to enter an MFA code or use another backup code.

If you have used most of your backup codes or if you have not saved a copy of your backup codes, you should generate new backup codes by navigating to the account page and selecting the Generate new MFA backup codes button. Keep a copy of your new backup codes in a safe place.

To change how you receive your MFA codes

At this stage if you wish to change between MFA methods of either SMS or authentication app, you will need to complete this via a desktop. Refer to the steps outlined in the Desktop - Multi-Factor Authentication (MFA) Lesson from the previous menu and follow the steps. 

If you do not receive this number, you may need to have these details updated. Contact your sport’s AMS contact or ams@ausport.gov.au