Multi-Factor Authentication (MFA)

What is MFA?

Multi Factor Authentication (MFA) means you will need to use an authentication method in addition to your username and password to login to your account for the Blood Sector Systems.

We have selected Okta to provide MFA services and you will be able to choose one of the following authentication methods: 

  • SMS (six digit code)
  • Email (six digit code)
  • The Okta Verify Authentication App (six digit code) 
  • The Okta Verify Authentication App (push notification)

When will I need to use MFA?

From 15 September 2024, you will need to use MFA every time that you login to your account.

Why do I have to use MFA?

Multi Factor Authentication (MFA) is one of the best ways to protect against someone breaking into your account. This keeps the sensitive health information stored in our systems secure.

More information on why MFA is important is available from the Australian Cyber Security Centre: Protect Yourself: Multi-Factor Authentication | Cyber.gov.au(Opens in a new tab/window).

Who is Okta?

Okta is the company selected by the National Blood Authority to provide MFA services. 

You can download the Okta Verify Authentication app on your mobile phone now, ahead of the upcoming changes however the app won’t be able to be linked to your Blood Sector Systems account until 15 September 2024:

 

How to prepare for MFA

Do I need to update my contact details?

Yes. Before 15 September 2024, you need to review and update your details in BloodPortal including:

  • Mobile number
  • Email address
  • Security questions
  • Other contact details

What if I can’t access my mobile phone or email in the workplace?

You will need to be able to access a mobile phone or email to login using MFA. There are no alternative methods available.

If you have concerns about your access to a mobile phone or email you should talk to your manager or IT department about options before the 15 September 2024. 

Web-based email options may be available for you to access your one-time code. 

Can I use a shared a mobile phone or email address to login?

No. You must use a unique mobile number and email address for your BloodPortal account, and these must be used to login with MFA. 

How long will the system let me stay logged in?

If you are actively using the system, you will stay logged in for up to 8hrs. After 8hrs you will be automatically logged out. 

If you are not actively using the system, you will be logged out according to the following timeframes:

  • BloodSTAR – log out if idle for 30 minutes
  • BloodNet – log out if idle for 20 minutes*
  • ABDR – log out if idle for 30 minutes. 
  • MyABDR – log out if idle for 30 minutes

*Note: If you are using the BloodNet orders screen, it will automatically refresh every two minutes keeping you logged in for the full 8hrs. 

 

Login Problems

What if I have an emergency order and can’t login?

If can’t login to BloodNet and you have an emergency order you can place a phone order with a Lifeblood Distribution Centre or you can contact the Blood Operations Centre on 13000 BLOOD (1300 025 663) or support@blood.gov.au.

I can’t see an option to use the Okta Verify Authentication App, what do I do? 

If you can only see email and SMS options for authentication and you want to use the Okta Verify Authentication App, you will need to call the Blood Operations Centre on 13000 BLOOD (1300 025 663).  A support officer will enable the option to use the Okta Verify Authentication App. 

Once this is done, you will see the option for the Okta Verify Authentication App on your next login. 

I use my account on an irregular or infrequent basis, how do I make sure I can login when I need to?

If you only need to access your account irregularly or infrequently, it is recommended that you continue to login to your account on a regular basis to keep the account active. 

You will receive reminder emails when your account is approaching 45 days inactive and when it is approaching 12 months inactive. It is recommended that you login when you receive these reminders to keep your account active. 

I changed my email address, why can’t I login to BloodPortal?

If you change your email address for BloodPortal it will take five minutes for the new email address to sync before you can log back into your account. 

When you change your email address, you will need to:

  • Wait five minutes before you attempt to login again 
  • Login using your Username (not your email address). 

It will take up to one hour before you can attempt login again using your new email address. 

If you don’t remember your Username and can’t wait for one hour you can call for support on 13000 BLOOD (1300 025 663) and a support officer will be able to manually sync your account so you can log back in straight away.

I changed my email address and now I can’t login to MyABDR, what do I do?

If you change your email address for MyABDR it can take up to one hour for the new email address to sync before you can login with your new email address. 

When you change your email address you have the following options:

  • Use the MyABDR app in offline mode and then log back in again after one hour. 
  • Wait for one hour and then attempt to login again.
  • Call for support on 13000 BLOOD (1300 025 663) and a support officer will be able to manually sync your account so you can log back in straight away. 

What happens if I get my password wrong?

If you get your password wrong three times in a row your account will be locked for five minutes. You can wait five minutes and try to login again, or you can unlock your account by using MFA to verify your identity.

If you need you can call for support on 13000 BLOOD (1300 025 663) and a support officer will be able to verify your identify and help you unlock your account. 

 

More information

Where can I find more information?

You can find more information on the changes being introduced on the Access and Ordering Page and in the ICT Security Enhancements News Item. 

The following new and updated user manuals are available with detailed step by step instructions and screenshots to help you understand the changes:

Release Notes have also been published to provide a summary of all the changes to the Blood Sector Systems as part of the ICT Security Release on 15 September 2024. 

Who can I contact for support?

If you require support, you can contact the Blood Operations Centre (BOC) on:

Phone: 1300 025 663 (13 000 BLOOD)

Email: support@blood.gov.au

BOC provides email and phone support from Monday to Friday 8am to 5:45pm AEST. BOC also provides urgent help outside of these hours through on-call officers. 

Last updated: 13 Sep 2024

Back to top