One more way to keep you safe
To help protect your financial and personal information, we’ve implemented multi-factor authentication (MFA) in My Client Space and iA Mobile.
About multi-factor authentication (MFA)
MFA is a 2-step validation process requiring you to provide 2 types of information to confirm your identity. It provides an additional layer of security to the sign-in process in order to ensure that:
- •It is really you who is trying to access your accounts.
- •It reduces your risk of becoming a victim of identity theft, online fraud and account hacking.
How does it work?
Authentication methods available to generate your security codes
There are four methods for generating your security codes. One method is sufficient; however, you may set up more than one method.
Note that a security code can only be used once. A new code will be required at every login.
SMS authentication
Receive security codes via text message (SMS) to your mobile phone.
Google Authenticator
Download the Google Authenticator app on your smartphone to generate security codes.
Voice call authentication
Receive security codes via voice call to your mobile or landline phone.
Okta Verify
Download Okta Verify app on your smartphone to generate security codes.
Logging into My Client Space or iA Mobile with MFA
When logging into My Client Space or iA Mobile, you will be prompted to enter your username and password, followed by the security code that will be provided to you through the authentication method you have selected.
Frequently asked questions
Why did iA implement multi-factor authentication (MFA)?
iA has integrated multi-factor authentication (MFA) into My Client Space or iA Mobile to add an extra layer of security for clients’ accounts. This is to ensure that it is really you who is trying to access your accounts. It also reduces your risk of becoming a victim of identity theft, online fraud and account hacking.
Is it mandatory to use MFA?
Yes, all companies of iA Financial Group are implementing this security mechanism, which is being adopted more and more throughout every major company.
Do I have to complete MFA upon each login?
When 3 consecutive logins are made from the same device, browser and location, you will be provided with an option to not complete MFA for 30 consecutive days. If there are changes in any one of the items (device, browser and location) during the 30-day period, you will be prompted to complete MFA.
Do I need a mobile phone to use multi-factor authentication?
No, you don't need a mobile phone to receive one-time security codes. You can also use a landline to receive your code by voice call.
How many phone numbers can I add for multi-factor authentication?
You can only enter one phone number per authentication method.
How long is my one-time security code valid?
Codes received via SMS and voice call are valid for 5 minutes.
Why can’t I receive one-time security codes by email for multi-factor authentication?
One-time security codes through SMS or voice call provide a higher level of security to protect your Investia account information.
What if I am travelling outside of the country?
Your account(s) are accessible through My Client Space and iA Mobile across Canada, in the United States and in most countries.
How can I change my authentication methods?
You can reset and choose your authentication methods in My Client Space and iA Mobile.
1. From the home page, click on the Profile icon at the top right of the screen.
2. Click on Multi-factor authentication, then on Reset.
What should I do if I have poor or no cellular reception within Canada?
If you have poor or no cellular reception while in Canada, try Wi-Fi calling. This smartphone feature is available from your mobile phone carrier and allows you to receive text messages (SMS) over a Wi-Fi connection when you have little or no cellular network coverage. Please contact your wireless provider for more information.
Alternatively, we recommend you have a secondary authentication method set up which will allow you to complete the MFA verification, for example OKTA Verify or Google Authenticator. These authentication methods only require Wi-Fi.