User Authentication Changes
In April, we will update how users log in to SCiSupplier. These changes improve account security and help protect your organization’s data.
The primary updates are:
-
-
Login will require an email address and password.
-
Multi-factor authentication (MFA) will be required for all users.
What is changing?
1. Email Address Required for Login
-
Users will log in with their email address and password.
-
Usernames will no longer be used.
-
Usernames will not allow access after the change.
2. Multi-Factor Authentication (MFA) Required
-
All users must enroll in at least one MFA method.
-
Existing MFA enrollments will not transfer.
-
All users must complete MFA setup at first login after the change.
3. Account Consolidation
-
If multiple user accounts use the same email address, they will be combined into one login.
-
Users will see a new account switcher.
-
The account switcher allows users to move between accounts without logging out.
4. Security Policy Updates
-
Minimum password length will increase from 8 to 12 characters.
-
The 90-day password expiration requirement will be removed.
-
Email addresses cannot be changed inside the application. Users must submit a support ticket to change their email address.
-
Users must access SCiSupplier using their organization’s assigned login URL.
What you Need to Do
To prevent being locked out of your account, users should confirm that the email address in their SCiSupplier profile is correct and active.
No other action is required before the release.
What's Not Changing
-
Roles and permissions will not change.
-
IP login range restrictions will not change.
-
Dynamic code functionality will not change.
Frequently Asked Questions
General
When will this change take effect?
The target timeframe is late April. We will share the exact date before the change takes place.
What happens if I no longer have access to my registered email address?
If you no longer have access to your registered email address, update it in your SCiSupplier user profile before the release date. After the release, email updates will require a support ticket.
I need to update my email address, but my company’s security settings prevent me from making changes. What should I do?
Contact your SCiSupplier administrator and ask them to update your email address before the release date. After the release, all email address updates will require a support ticket.
Will there be downtime during the transition?
Yes. There will be scheduled downtime during off-hours when no trading windows are open. We will communicate the exact timing in advance.
What happens the first time I log in after the update?
You will:
Will usernames be used for anything in the future?
No. Usernames will be permanently retired.
Multi-factor Authentication
What MFA methods are supported?
Which authenticator apps are supported?
Any app that supports TOTP. Examples include:
-
Google Authenticator
-
Microsoft Authenticator
-
Authy
-
Duo Mobile
-
1Password
-
LastPass Authenticator
If I already use MFA today, must I enroll again?
Yes. All users must complete MFA enrollment again after the update.
Password and Security
Why is the minimum password length increasing?
Longer passwords increase account security and align with modern security standards.
Will passwords still expire every 90 days?
No. Password expiration will be removed.
Can users change their email address in the application?
No. Email updates require a support ticket.
Will IP allowlist settings continue to apply?
Yes. Existing IP allowlist settings will remain unchanged and will continue to be enforced. No configuration updates are required.
Users with Multiple Accounts
I have more than one account. What will change?
If your accounts all use the same email address, they will be combined behind one login. You can use the new account switcher to move between accounts without having to log out and back in.
What if my accounts use different email addresses?
Only accounts that share the same email address will be combined. Accounts with different email addresses will remain separate and must be accessed with their respective email address.
Will I need to reset my password and enroll in MFA more than once?
No. You will only complete these steps one time.
Are shared login credentials supported?
No. Each user must have an individual account and a unique email address.
Login URL
How do I know which login URL to use?
Each organization has a designated login URL. Users must use the URL provided by their organization.
Additional Support
If you have additional questions, please contact 2026userchanges@primerevenue.com for additional assistance.
Reseller Users
Some reseller partners may communicate these changes directly. If you are part of a reseller program, please follow guidance from your reseller contact.
