The member will need to wait 15-20 minutes until they are unlocked. Or the member can also toggle to the standard login process and enter their username, password, and answer to security question, then access the settings info option from the More menu, and they can reset their app data or go into authentication options and reset authentication options on all devices to re-establish their MACO features.

There are several ways to obtain this data. To see the total number of active online banking members, use Tool #856 Tiered Svcs Monthly Comparison to display active user counts for any monthly period. (HINT: Click the Goal 4 button to display this data.) This can be done even if your credit union does not use Tiered Services for any other purpose. To print a report of usage statistics, use Tool #141 ARU/Online Banking Stats Dashboard To see online banking usage stats for a particular m  More...

When members receive an error code of 1 or 2, there is a very simple fix for it in CU*BASE. It's Me 247 online banking and bill pay (Fiserv) programs communicate with each other automatically through an authentication PIN every time we go from one to the next. When we see a status code of 1 or 2, it is telling us there is an issue with this PIN. It is easy to reset and the member will be able to get into bill pay within 24 hours. Launch Tool # 14 Member Personal Banker. Enter the member&r  More...

Security question answers are also used for the “forgot password” feature that allows the member to reset their password without needing to call your credit union. Because of this, It’s Me 247 continues to require the entry of the security question each time the member logs into online banking to ensure that these answers are kept top of mind. NOTE: If your credit union is concerned about MFA and security questions during login making the process too lengthy, remember that the   More...

MACO authentication is separate from the one-time passcode and device registration required when MFA is activated. MACO authentication replaces the need to enter a password and security question answer, but it does not replace the need to use MFA to login to online banking. After you activate MFA for your members, MFA (when required) will become the final step in authentication, regardless of whether a fingerprint, voice, photo ID, or PIN was already entered earlier as part of the same authentic  More...

There is a table called MBRAPPSTAT which holds records of various API calls done during the entire member authentication process, even before they have successfully logged in to online banking (even if through the mobile app). That is the first place TO look to see records of what's happening with this member's account as they step through that process. There is one row for each API call, and each API call represents a different phase of the process. For example - Get Username, Get Chall  More...

When members authenticate for MFA, they use a one-time passcode, which also gives them the opportunity to register their device. The next time they log in on a registered device, they may not be required to use a one-time passcode. Situations where a one-time passcode WOULD be needed include the following: Your configuration for MFA in Tool #569 Online/Mobile/Text Banking VMS Config requires a one-time passcode be sent for authentication each time the member logs in. Your credit union has set  More...

Here is one way to make sure that MACO is unenrolled from all devices that have been enrolled using this particular account: Step 1: In case credentials have been compromised, have the member change their password, then enroll for MACO Step 2: If the member sees the message, “Previous Enrollment Found,” that indicates that another device has, in fact, enrolled with MACO. (Less commonly, this message could also mean that the member had previously enrolled but hit “Reset All  More...

If your member gets the answer above, it means they have enter a word or part of a word on the restricted nicknames list. The restricted names list was designed to keep offensive words out of eyes of employees assisting members with their accounts, and is mainly used for the nickname feature in online banking. (It is also used in BizLink 247 authentication.) This database of restricted names is maintained via Tool #765 Restricted Nicknames Configuration . In this database, you can find the word  More...

IMPORTANT NOTE: When It’s Me 247 was updated in 2021, the “See” option shown on here was made unavailable. There are two major points to consider when thinking about allowing members to see information beyond the account to which they are actually logged in. Both extend beyond online banking to consider a financial institution’s role and responsibility in protecting member private data via all access channels, from the teller line to a back office employee answering   More...

PIB provides a layered security approach to add additional authentication controls for Online Banking. PIB, which stands for Personal Internet Branch, is an independent application that provides multiple, configurable controls that govern how Online Banking behaves and what members can do with access to it. PIB allows your members to control access to their accounts with controls by feature, day of week, time of day, and even geographic location. It layers additional passwords and member aut  More...

If you require an email address for eStatements and your member has a wrong email address (and is enrolled in eStatements), the system will do everything to ensure that a paper statement is not mailed (which happens in this case when the email address is marked as incorrect). The next time the member logs on to online banking, they will be presented with a wrong email address prompt and asked to provide a valid email address. A link is provided to the member in this window that takes them direct  More...

Online Banking continue to work just fine whether you decide to activate PIB or not. Yo u should not activate PIB without some careful planning and preparation. You need a plan. A plan for marketing the change to members. A plan to train your staff. A plan for rolling out the changes with an acceptable level of disruption to members and staff. A plan to handle the increase in phone calls and frustrated members. A plan to make this part of your process for opening new memberships.   More...

Yes, the configuration at the credit union level allows you to set a different number of days for the device expiration for members who access It’s Me 247 via browser versus mobile app. This is so you can (if desired) set a shorter timeframe for the browser environment, which may not have the mobile app controls, such as a personal device or MACO (fingerprint, voice, PIN, or face) authentication.

The member’s experience with MFA for personal information changes and at login is very similar. They are presented the same window to select a phone or email and then the same second screen to enter the one-time passcode sent to them. The code word length and time available to enter the code is the same. The difference is the ability of the member to opt to register their device during the MFA login process (so they will not need to use MFA for a configured length of time). The personal in  More...

Yes, so far Plaid is the only aggregator that is supported with MFA because they have worked with us to establish a direct integration for authentication. Most aggregators use a “screen-scrape” technique, which means the member gives their credentials to the aggregator, and they in turn log in to the site as if they are the member, navigate the site, and copy or download needed data. MFA prevents this from working because the aggregator cannot receive and enter the one-time passcode.  More...

It's Me 247 supports MFA for first-time login. The steps the member sees are outlined in the MFA section of the Strategies for Securing and Controlling Member Access booklet linked to below. ( Other MFA options for security of higher-risk activities are also covered in this section of the booklet.) Activate this MFA for first-time login on the Online/Mobile Password and Security Settings screen, accessed from Tool #569 Online/Mobile/Text Banking VMS Config .

Learn more about configuring these features on the Configuring Online Banking Features 1: General VMS Features screen. Help is linked to below. The member's experience is documented in the Strategies for Securing and Controlling Member Access booklet, also linked to below.

It is important that the member add any numbers that might be used for MFA to their membership. Only phone numbers on the membership account will be presented to receive the one-time access code via text message. Phone numbers associated with names on the Secondary Names screen will not be presented.

Unfortunately Intuit has made it very clear they will not work with us on your behalf, and generally will work only with their paying customers (your credit union or your member). However, here are a few things to suggest to your members that might help narrow down where the problem lies: Ask them to make sure they can log in manually. If they can't log in manually, Intuit won't be able to, either. There are two sites to try: Standard site: https://www.bizlink247.com/###/authenticatio  More...

The PIB Profile online tool does include a mechanism for members to click forgot my password and, after answering a series of challenge questions, the system will send a new password to the email address on file at the credit union for that member. There is also a mechanism in Online Banking where, if your credit union has already set up a profile for the member, or if you require the use of a PIB profile in order to access Online Banking. A member creates a user name and password to access  More...

Below are some commonly asked questions about MFA. Below the questions are some fuller feature documentation resources. After my credit union activates multi-factor authentication for It’s Me 247 , do my members using the “jump” feature (to access a second membership without entering credentials) need to use MFA during this jump? Can you send a one-time passcode for multi-factor authentication (MFA) for BizLink 247 via text message? My credit union has activated multi-factor au  More...

Yes, even if you use multi-factor authentication for password reset, your member will still be required to use security questions to access online banking. After the password reset is completed, the member will be logged off and will need to log in, including the step of answering a security questions.

Is Loan Manager specific to targeting marketing loan products to authenticated members? Yes! The existing Legacy Loan Application was originally designed for both members non-members and was universal to all loan types. The new Loan Storefronts Web Modules are being developed within our web mobile app online banking flagship solutions. This allows credit unions to target their existing members towards specific loan products. When used together, they provide a faster, more convenient way   More...

MemberPass is a third-party authentication integration with CU*BASE that allows credit union staff to validate a member’s identity using their cell phone. Use Report Builder and the following files for more information: VMBPENRMST - MemberPass Enrollment Master VMBPACTAUD - MemberPass Member Activity Audit File For field descriptions, refer to Tool #332 Database Search Assistant .