Setting up MyPay Multi Factor Authentication

Find out how to set up Multi Factor Authentication to access MyPay, including info on the app you'll need and the steps to get set up.

Published: 26 June 2023
Updated: 26 August 2025
Info: What do I need to do and when?

Register for MFA from 27 June 2023.

To register for Multi Factor Authentication (MFA), you will need to have an authenticator app downloaded and registered to your preferred mobile device.

The BBC are not specifying a particular Authenticator app to use, as some colleagues will want to continue to use the app they already have.

However for colleagues that don’t already use an Authenticator app; the ForgeRock Authenticator App is already widely used within BBC and should be accessible for all colleagues.

When searching for an Authenticator App to download, make sure you download the app you intended to – not the one that appears in an advert at the top of your search results.

Downloading and using the ForgeRock Authenticator App

We've included some screenshots from downloading the ForgeRock Authenticator app to a colleague’s iOS device and using it for the first time.

This is the icon for the ForgeRock Authenticator App.

Forgerock padlock in shield icon

Search for the ForgeRock Authenticator app from the store where you can download apps to your device.

The first app that appeared in our search results was an advert for another Authenticator app – make sure to look for the ForgeRock Authenticator logo.

Select to download.

Forgerock download from Apple Appstore

Once the app is downloaded, open the app. There are several welcome/information messages that you can swipe through.

Welcome to Forgerock screen

To register with an online account like MyPay, select the plus icon in the bottom right-hand corner.

No accounts screen on Forgerock app

To add an account, You’ll be given the option to Scan a QR code or enter a code manually. You’ll need to select the corresponding option on MyPay but it’s easiest to select scan the QR code.

Add account screen on Forgerock app

We selected to allow the app to access the camera on the device.

All Forgerock to access camera screen

Align the guidelines on your phone screen with the QR code displayed on MyPay.

QR code screen in Forgerock app

Your six digit code for inputting on MyPay will be displayed. For future MyPay logins, this code will display and refresh at regular intervals 

Account added screen on Forgerock showing 2FA code numbers

Completing Registration on MyPay

Once your Authenticator app is downloaded onto your mobile device, on MyPay, begin to log on as usual, using your username and password.

Your username is your BBC personal number (this is six digits long and can be found on PeopleView on Gateway, or in your contract).

If you see an error message when you access MyPay, you may need to clear your browser cache. Guidance on how to clear your browser cache is available on Gateway.

If you have forgotten your password then please send an email to EY Customer Support – eyct@service-now.com who will ask for a reset, and will disable MFA for you to enable it. This can take 24-48 hours.

Login screen with personnel number and password entry fields

Register for MFA in 3 simple steps

Once your username and password are input you’ll be routed through these registration screens.

Enable Multi-factor Authentication screen

In the Authenticator app, select to add an account by scanning a QR code and align the guidelines on your phone screen with the QR code displayed on MyPay or you can choose to use the manual entry code.

Scan QR code screen

A six digit code will appear on your app for this account, please input this on MyPay and select Verify.

(The six digit code will expire after 30 seconds and a new code will be generated on your app.)

Enter 6 digit code verification screen

You’ve successfully registered for MFA and can close the information box.

Multi-factor authentication verified screen

Secure for the future

After completing registration for MFA, you will need to login and you may be asked to reset your password.

This is a great opportunity to create a strong password - it’s a good idea to incorporate uppercase and lowercase letters, numbers and/or symbols (e.g. !, #, or @).

You will then need to open your Authenticator app and input the six digit code which refresh every 30 seconds into MyPay; you can now access your pay documents.

In the future when you log in you will need to input your BBC personal number, your password and open your authenticator app to retrieve a six digit code against your MyPay account for inputting on MyPay.

Lost or new device

If you lose or replace the device that your Authenticator app is on, please contact EY Customer Support – eyct@service-now.com  who request an update to your record which will trigger you to re-register for MFA with a new device when you next login on MyPay. This can take 24-28 hours.

Rebuild Page

The page will automatically reload. You may need to reload again if the build takes longer than expected.

Useful links

Demo mode

Hides preview environment warning banner on preview pages.

Theme toggler

Select a theme and theme mode and click "Load theme" to load in your theme combination.

Theme:
Theme Mode: