Midoco - 2-factor authentication

Objective: Integration of the token into the Midoco access data for enhanced security measures in accordance with PCI/DSS 4.0 compliance.

Preparation:

• Ensure that you have administrative rights in Atlatos to make the necessary changes.
• Enable 2FA for the technical user of Atlatos in Midoco and generate the corresponding token.

Steps:

• Login to Atlatos:

  • Log in with your administrator credentials in Atlatos.

• Navigation to the travel agency basic data:

  • Select “Administration” in the main menu and then navigate to “Travel Agency Basic Data”.

• Access to Midoco access data:

  • Scroll down to the “Midoco Access Data” section.

• Token Extension:

  • Add the new token in the designated field. This serves as an additional security factor.

• Saving Changes:

  • After adding the token, click “Save” to confirm the changes.

Important Information:

• As of Midoco release 18.0, 2-factor authentication is required for all user accounts - for technical users using the web service, this is currently optional but will also become mandatory by the end of May 2024.
• A unified password policy requires that all passwords be at least seven characters long and include uppercase and lowercase letters, special characters, and numbers.
• Changing the password will become mandatory once a year for all users.
• The tokens for technical users must be renewed every 12 months at the latest.

We thank you for your support and commitment to the security of our systems. For further questions or needed support, please contact our support.