Two-factor authentication and passkeys
Users sign in with their Sage Intacct account: two-factor authentication takes place in Intacct, and Arkaio does not ask for a code again. It must therefore be enabled and enforced for every Intacct account that accesses Arkaio (security policies of the Intacct company). Passkeys add extra protection when signing a bank order; they are configured in the settings, under the Security theme.
Important — If an Intacct account without two-factor authentication is compromised, it gives direct access to Arkaio: check the Intacct security policy before opening Arkaio to users.
Updated on October 17, 2026