American Express @ Work® Reconciliation adds Two-factor Authentication Log in
Introducing a higher level of online security and
safety with Two-factor Authentication on @ Work Reconciliation
American Express is implementing a security enhancement to the @ Work Reconciliation login process called Two-factor Authentication that requires:
A new Enterprise ID
A one-time password sent via email
A seamless, secure experience
Two-factor Authentication process will provide Program Administrators and End Users with a seamless login experience and benefits including:
Enhanced security protocols
Benefit from an extra layer of security
Protective of sensitive data
Secure your company's data from unauthorized access
Industry best practice in security
Be confident with benchmark levels of account security
An easy two-step setup process
Phase 1
Creating an Enterprise User ID
In preparation for Two-factor Authentication login, you will first need to create an Enterprise User ID for your company in the process outlined here.
The process will start with the new welcome page shown here. After you log in use your exisiting @ Work Reconciliation Credentials and follow the simple steps through the completion.
Banner Carousel
-
Step 1
Click “Login with Current Credentials” on this new Welcome screen
-
Step 2
Enter your current @ Work Reconciliation login credentials
-
Step 3
Create your Account by completing your Profile information and click “Continue”
-
Step 4
Create a new Enterprise User ID and click “Continue”
(You can use your current User ID, but you need to set up a new password)
-
Step 5
Receive confirmation of your Account creation and click “Get started”
-
Step 6
Arrive at the @ Work Reconciliation Home Page
Phase 2
Log in using Two-factor Authentication
Once you have created your Enterprise ID, you will log in using your new credentials.
Set up Two-factor Authentication by:
- Logging in with your Enterprise User ID credentials (Phase 1)
- Entering a one-time password sent to you via email to complete your log in.
Banner Carousel
-
Step 1
Click “Log in with New Enterprise Identity”.
-
Step 2
Enter your current @ Work Reconciliation login credentials
-
Step 3
Recieve an email with your one-time password.
-
Step 4
Enter one-time password and click "Verify"
-
Step 5
Tick the box (optional) * so that the system rememebers your device as a trusted source. Then click "Continue".
* Optional choice - System Verification Rememember Device (Step 5 above)
If you tick the box in step 5 so that the system recognises your device as a Trusted Device, you will be able to make subsequent logins using your existing credentials and arrive directly at the @ work Reconciliation home page.
If you don't tick the box in Step 5, you will ned to action the Two - factor Authentication Process each time you login to @ Work Reconciliation, i.e repeat Steps 3 to 5 above each time.
-
Step 6
Arrive at the @ Work Reconciliation Home page.
Note :
- To streamline the process, you have an option that lets the system recognize your device as a Trusted Device.
- This enables you to login with your User ID and Password without the need of a one-time password each time you log in. The new process also simplifies authentication where you forget your User ID and / or Password.
The enhanced Two-factor Authentication is being implemented accross the globe, starting from Canada, GDC, United Kingdom and United States.
FAQs - Two-factor Authentication on @ Work Reconciliation:
Two-factor authentication is for both you and your company's online safety and security. It is a requirement in many countries accross the globe, and a commitment we make to our Clients to secure their sensitive data in line with regulatory standards.
You can, however it is not recommended. Enrolment is a quick and easy process and should only take a moment of your time. Once you are prompted to enrol, simply verify the prepopulated data (name and email) is correct and create a six-to-nine digits numeric security code. This is mandatory step. If you close the enrollment window without completing it, you will be prompted to enroll the next time you log in. If your prepopulated data is not correct, please contact your local PA servicing Team to help update it.
The system that enables Two-factor authentication needs to create a profile for you. The security code will enable American Express to retrieve your account credentials (User ID and password) should you forget them or lock yourself out of the system. It will allow you to choose how you want to receive your one-time password for
Two-factor authentication. If you choose not to provide one, your
one-time password will always be sent to your business email address.
That depends. You will have the option to remember the trusted device you are using to log in with. If you choose to remember your device, that trusted device will serve as your identity verification for future logins. You will input your User ID and password and be sent directly to the @ Work Reconciliation homepage until the time when you are prompted to re-authorise your device. If you choose NOT to remember your device, or if you sign in from a different device, you will be sent a one-time password every time you log in and continue with the standard two-factor authentication process.
Need help?
Programme Administrators can contact us based on their location below:
Europe and Asia-Pacific: technicalsuloutionsupport@aexp.com
Latin America: techteamlatam@aexp.com
US and Canada: CARsupport@aexp.com