Multi-Factor Authentication (MFA) for Paygate MAP

Multi-Factor Authentication (MFA) for Paygate MAP

What is MFA and why is it important?

Multi-Factor Authentication (MFA) adds an extra layer of security to your Paygate Merchant Access Portal (MAP) login. In addition to your username, password, and company credentials, you’ll also need to enter a one-time 6-digit code generated by an authenticator app on your mobile device.

This ensures that even if your password is compromised, no one can access your account without the MFA code—helping protect your business and customer data.

What will change?

Starting 15 May 2025, all users accessing the Paygate Merchant portal (MAP) will be required to use MFA.

Here's what to expect:

  1. Upon login, you’ll be prompted to set up MFA using an authenticator app like Google Authenticator or Microsoft Authenticator.
  2. You’ll have the option to skip MFA setup up to 3 times. After the third skip, MFA setup becomes mandatory.
  3. If you skip MFA, a dashboard banner will appear as a reminder and allow you to return to the setup at any time.
Once set up, you’ll need to enter a 6-digit MFA code each time you log in. You’ll also receive recovery codes—save these in a secure location to regain access if you lose your phone or the authenticator app.

How do I set up MFA?

MFA setup will be triggered during your first login after 15 May 2025.

For existing users:

You'll be prompted to set up MFA in the following scenarios:

Logging in successfully:

  1. You’ll first be prompted to update your password to meet new security requirements.
  2. After updating your password, you’ll be prompted to set up MFA.

Resetting your password:

  1. If you click "Forgot password" and log in using the temporary password, you’ll be required to update your password. After this, you’ll be prompted to set up MFA.

After previously skipping MFA:

  1. Once you log in again with your new password, the MFA setup prompt will reappear.
  2. If you’ve reached the maximum 3 skips, MFA setup will be required before accessing your dashboard.

Step-by-Step setup guide

Step 1: Log in to your MAP account using your current login credentials.


Step 2: You’ll see a prompt informing you of the updated password policy and MFA requirements. Click "Update password" to continue.
Info
💡 Note: All users must meet the new PCI DSS password requirements. You won’t be able to access MAP until your password is updated. Learn more here


Step 3: Update your password to meet the password strength requirements. follow the screen prompts that will inform you if your password meets the requirements. 


Step 4: You’ll now begin the MFA setup.
Download an authenticator app, such as: 
  1. Microsoft Authenticator
  2. Google Authenticator
  3. LastPass Authenticator app
Once you have downloaded an authenticator app of your choosing, click on "Next" Call to action (CTA) button to move onto the next step.
Alternatively, you can also skip setting up MFA if you are not yet ready. 

Warning
Note:  You can choose to "Skip for Now" during the first 3 logins. On the 4th login, MFA setup will be required to access your account
Notes
Note: If you skip MFA, a banner will appear on your dashboard reminding you to complete setup, with a button to resume setup anytime.

Step 5: Use your authenticator app to scan the QR code on the screen or manually enter the setup code.




Once your profile is set up on the authenticator app, a screen similar to this will show: 
Info
Note: The code shown in your authenticator app is time-based and refreshes automatically every 30 seconds. If you dont enter the code in time
dont worry- a new one will be generated right away. Simply enter the latest code shown in the app before it expires to successfully log in. 
This time sensitive system helps ensure your log in remains secure

Step 6: Enter the 6-digit verification code from your authenticator app into the MAP screen and click Next. If the code is incorrect, you’ll see an error message.



Step 7: Once verified, you’ll be prompted to download your recovery codes. Save these somewhere safe — you’ll need them if you lose access to your phone or MFA app. 



Step 8: Click "Log in to MAP" to complete the process and access your dashboard.


For NEW merchants /Users

  1. The MFA setup process is the same, but you won’t have the option to skip setup.
  2. You also won’t see the initial prompt described in Step 2 above.

Frequently Asked Questions

What authentication apps are supported?

You can use any Time-based One-Time Password (TOTP) app, including:

  • Google Authenticator

  • Microsoft Authenticator

  • 1Password

What happens if I lose access to my phone or authentication app?

During MFA setup, you’ll receive recovery codes. Save these in a safe place!
If you lose your phone and recovery codes, please contact our support team for account recovery.

Is MFA required for all users?

Yes. All users accessing Gateway (MAP) will need to set up and use MFA.

Will MFA impact my API or payment integrations?

No. MFA is only for user access to the Gateway platform (MAP) and does not affect API integrations or transaction processing.

Can I use the same MFA app for multiple users or accounts?

Yes, most authentication apps allow multiple account profiles. Just make sure each QR code is scanned separately.