IressID - Steps to Prepare
IressID is rolling out to all users across Australia and our site is estimated to be updated in September (approx.) We will provide further updates and exact date times of when this update will roll out on Compass/CWT Xplan sites.
The way we log into Xplan will impact all users and all users will need to have an IressID profile with 2FA setup.
Please see below an explanation from Iress around what is IressID and why it's being implemented:
⚠️ Important:
This change will not replace your current two-factor authentication (2FA) setup for Compass or CWT Xplan—at least not until September, when IressID is officially launched. At that point, you’ll need to use your IressID account and its associated 2FA, which you can set up using the guide below.
We strongly encourage you to set up your IressID account now, so you're ready ahead of the launch. Delaying setup until after the launch may result in access issues or login delays with Xplan.
Please do not replace your existing Compass/CWT 2FA with your IressID 2FA. These are separate systems and must be maintained independently.
Make sure to store your IressID login and 2FA details securely, so you're prepared for the September update.
Step 1 - Check you have a preferred email address in Xplan
- Click on your name → My preferences
- My Details → Adviser key contact (click on settings wheel if you can't see menu)
- Check that you have a preferred email address added and preferred is 'Yes'
- If you don't have a preferred email address please click 'Add' to add one in.
Step 2 – Create an IressID account
Use the following link: Auth0 User Portal
- If you already have an Iress Community login then use your email and click login.
Note: everyone will need to create an IressID account using their own email. - If you've never registered for Iress Community then click 'Register' and ensure you use the same email address as what you have in Compass/CWT (see step 1).
Step 3 – Setup 2FA for your IressID
- Once you login/create an account you will need to setup one of the following:
- Notification via Auth0 Guardian app – another authenticator app.
- Google Authenticator – can use Google/Microsoft/other. *Recommended*
- Security Key – scan with iPhone/Android or insert USB. Note: More complex or phone limitations exist and may require you to contact your own IT for help.
Note: there is no option to receive the 2FA code via SMS or email.
Note: You may be prompted to save a passkey using your Windows pin code/face sign-in. Iress have stated using this doesn’t always work and have suggested to use the Google Authenticator when setting up the IressID 2FA (see below). Further, should you setup a passkey using your face/pin code we will not be able to assist with recovery/reset of the passkey should you change your computer pin code/face sign-in as this will need to be managed by yourself or your IT team.
If prompted, try selecting ‘Cancel’ or ‘Not on this device’ should you not want to save a Windows passkey and ensure you setup 2FA via Google Authenticator.
Example using Authenticator and scanning using a phone:
- Click Google Authenticator or similar then open your authenticator app. See the bottom right corner (press + in Google or QR code icon in Microsoft).
- Scan code, you should now see 'iress:youremail' (e.g. iress:john.sample@fpwork.com) within your authenticator app.
- Enter the code from your app into the field below and select 'Continue'
Next, you will see a recovery code (see below), once saved press 'I have safely recorded' and 'Continue'.
Note: Not securely saving this recovery code can cause delays accessing your Xplan login should you lose the device that you receive your 2FA code to and cannot reset 2FA.
Tip: Save this recovery cover on a separate device to the device you receive your 2FA. E.g. if you used the authenticator app on your phone for the code then save the recovery code on your computer. This will ensure you can access your login if you lose either.
Once logged in, you should see the following and have successfully setup your IressID:
Step 4 – Post IressID update **Estimated September 2025**
Once IressID is pushed onto the site later this year, you will receive an email with your user id in Xplan (see below). Note: we will provide further updates closer to the date.
Click 'Claim Access' to connect your IressID with Xplan.
Enter your 2FA code that you should have set up in Step 3 to log into Xplan.
FAQs
Q: User doesn't have a phone?
If a user doesn’t have a phone and cannot scan QR to setup 2FA, Iress have suggested using 2FA browser extension. You will need to discuss with your IT team as to which 2FA browser extension to use and as well as their assistance with installing/managing. There is also the option of checking with your IT team to see if your password manager has TOTP functionality and can store the TOTP code in there. Again the setup of this will via browser extension/password manager will need to be managed by yourself/ your IT team.
To get the code click 'Trouble Scanning'
Then the code is available to copy into your preferred extension browser/password manager
Q: I've setup using Google/Microsoft authentication and lost my phone/device?
If you've lost the device you would receive the 2FA code, you can select 'Try another method' and enter the IressID recovery code you have securely saved:
