Cloud Software Authentication and Authorisation Update

Software Developer Forum

12 October 2017

Presented by Australian Taxation Office October 2017 CAA update

 Timeframe update  Walkthrough of RAM  CAA requirements  Next steps Available

Timeframe update Now

RAM Phase 1 AUSkey Developer Kit (with CAA Updates) dotNET, Java and C version

2 2018

September October November December January February March April May June July August September

Beta Trial SWD/RT O SW preparatio D n and s support 20 w NOV i 2017 l to l 31 MAR 2017 b e

b r o u g h t

a a s p t p Software Developers/RTOs test a r in live environment g o ( e a 2 d c 0 h N O V Software Impacted SWD must 2 Developers can transition their clients to test in EVTE 0 new solution 1 (1 NOV 2017) 7 ) Walkthrough of RAM Software developers (OSPs) Registered Training Organisations (RTOs)

 Request notification (creates  Request notification a pending notification for your  Accept a pending notification RTOs/clients to accept)  Decline a pending notification  Suspend a notification  Remove an accepted notification  Enable a notification Logging in as an OSP/RTO

Welcome to My Cloud Software Services

My Cloud Software Services allow you to notify government agencies of cloud software used by your business.

You can send and receive transactions to and from government agencies using your cloud software, by notifying us of your cloud software service details.

To login you need a current AUSkey. If you have an administrator AUSkey you will be able to make changes. Standard AUSkey holders will be able to access RAM on a read only basis. To register for an AUSkey, visit a b r .g ov .a u / A U S k e y . OSPs and RTOs will select the Login button to authenticate (VANguard) RAM User Interfaces

Logged in as an OSP

Ed Oaner

This OSP’s landing page has an alert for a pending notification OSPs have two tabs:

 ‘My services’ for cloud software services You can edit, add or remove notifications for cloud software services below. they use for government interactions  ‘My clients’ for clients that use their cloud software services for government interactions Previous and Current screen toggle button Notification list showing the current notifications – this list shows an accepted and a pending notification Status of the notification Start and end date of the notification

Edit link Test HS Pending 05/10/2017 Request notification 1. Most RTOs won’t have a role Patty Peaceful 2. The RTO landing page doesn’t have Peaceful Gardens Organic Cooking School Ltd separate tabs for ‘My services’ and ‘My clients’ like an OSP has

You can edit, add or remove notifications for cloud software services below.

Search by entering an ABN or name Once logged in, the steps are the Agency User name same for an OSP and RTO actioning a notification however RTOs will need Peaceful Gardens Organic Cooking School Ltd to accept a mandatory declaration.

You can edit, add or remove notifications for cloud software services below. 1. Log in

2. Land on the ‘Manage

notifications’ page Search by entering an ABN or name 3. Select Request Notification The ‘Check’ button validates that the ABN is active and registered for an online software provider.

1. Enter the ABN of the online software provider

2. Select Check

3. If the ABN is inactive or invalid, an alert message displays, prompting the user to check the ABN Notification details screen – once the ABN is checked and validated, the OSP details populate.

1. ‘Provider type’ currently defaults to Online Software Provider 2. ‘Software ID*’ is provided to the client by the OSP. It’s mandatory and validated upon stepping off the field. If the number is not correct, a message will prompt the user to re-enter it 3. ‘Add another’ provides the option of adding more Software IDs Software ID*

4. ‘Start date’ and ‘End date’ default to ‘Today’ and ‘No end date’ - they can be modified using the date picker 1. ‘Set the agencies to notify*’ provides Set the agencies to notify* the one current option of Unique Student Identifier Office (USI), Department of Unique Student Identifier Office (USI), Department of Education & Training Education & Training 2. Once the agency tick box is selected, the declaration will populate 3. An error message displays if the box isn’t selected *Accepting the declaration for the selected Accept declaration agency service is mandatory.

If the business is a Registered Training Organisation, Vocational Education and Training Related Body If the check box isn’t selected, the or Vocational Education and Training Admission Body (as defined in the Student Identifiers Act 2014) notification can’t be saved and two that conducts transactions with the USI Registry System, it may use a third party software service messages will appear – provider to enable these transactions, as long as the:

1. At the top of the screen: • ATO has authorised the software service provider for this purpose; and • use of a software service provider by the business does not infringe the Student Identifiers Act 2014 or the Privacy Act 1988 .

I declare that:

: • my business uses the software service provider identified by the Software ID/s listed above, to 2. At the declaration check box interact with the USI Registry System;

• my businesses’ use of a software service provider will not infringe the Student Identifiers Act 2014 or the Privacy Act 1988. Once accepted a success message displays at the top of the screen: Accept Declaration* CAA requirements

OSPs need to complete in order to use the CAA solution

 Be registered for Standard Business Reporting (SBR)  Have a device AUSkey – enables the transmission between the SWD and government agency via the CAA solution  Update your software to the latest AUSkey Developer Kit (ADK) with the CAA changes  System test the latest AUSkey Developer Kit (ADK) with the CAA changes in the USI test environment  Have completed CAA registration requirements outlined by the USI Office – once complete, you will automatically receive an active role status in Relation Authorisation Manager (RAM) Next steps

 Ensure all requirements have been met (e.g. software updated with CAA solution and testing as required)  Complete and submit the online USI CAA Registration Form  System test in USI Office environment  We will advise when end-to-end testing through 3PT environment is available  We will contact beta trial participants to set weekly catch-up meetings and supply testing scenarios  You can provide feedback or ask questions through the standard USI Office mailbox: u sii t@edu c at i on.go v .au Questions