1. 1. INFORMATION SIGNALS
Further information on how to access Signals is set out below.
1.1.1. I am a client of Forvis Mazars. Does that mean I am given access automatically?
If you are a Forvis Mazars client, you will automatically receive an e-mail stating your username and the option to create a password. If you did not receive this e-mail, please contact your Forvis Mazars contact person or call +31 (0)88 277 11 11.
1.1.2. I do not want to use Signals anymore. Where do I unsubscribe?
If you do not want to use Signals anymore, please contact your Forvis Mazars contact person. Alternatively, send an e-mail to signals@mazars.nl. State which username you wish to unsubscribe. After you have unsubscribed, you will receive a confirmation that you have successfully unsubscribed from Signals.
1.1.3. Are there any extra costs for using Signals?
No, there are no additional costs for using Signals. If you want to know more about our services and related fees, please contact your Forvis Mazars contact person or call +31 (0)88 277 11 11.
1.1.4. Is my information in Signals safe and secured?
Signals is an online platform in which every client has a personalized, secured account. Clients log in from a secured environment. Login data are always personal and you have a personalized level of authorization. Only authorized persons can view and/or sign returns and/or financial statements for filing purposes. Your income tax returns are personal and can only be viewed from your personal page. Signals contains advanced technology enabling digital returns to be sent to the authorities requesting them (government bodies and banks), reliably.
Your Signals login data are personal. For security reasons, we ask you not to share these with third parties. For more information take a look at our Security whitepaper.
1.1.5. How can Signals be accessed?
Signals is compatible with every (modern) browser. In addition, Signals is available through your Smartphone, tablet or computer.
Signals can be accessed through the following browsers:
- Chrome
- Firefox
- Edge
- Opera
- Safari (specifically for iOS devices)
1.1.6. Is Signals affected by the October 2023 OKTA Security breach?
Forvis Mazars is not affected by the Okta security breach of October 2023. We received the following official statement from Okta:
''Dear Customer,
Okta Security has identified adversarial activity that leveraged access to a stolen credential to access Okta's support case management system.
The threat actor was able to view files uploaded by certain Okta customers as part of recent support cases. It should be noted that the Okta support case management system is separate from the production Okta service, which is fully operational and has not been impacted. In addition, the Auth0/CIC case management system is not impacted by this incident.
All customers who were impacted by this have been notified. This email is an informational message. If you are an Okta customer receiving only this message, there is no impact to your Okta environment or your support tickets.
Within the course of normal business, Okta support will ask customers to upload an HTTP Archive (HAR) file, which allows for troubleshooting of issues by replicating browser activity. HAR files can also contain sensitive data, including cookies and session tokens, that malicious actors can use to impersonate valid users. Okta has worked with impacted customers to investigate, and has taken measures to protect our customers, including the revocation of embedded session tokens. In general, Okta recommends sanitizing all credentials and cookies/session tokens within a HAR file before sharing it.
Attacks such as this highlight the importance of remaining vigilant and being on the lookout for suspicious activity. We are sharing the following Indicators of Compromise to assist customers who wish to perform their own threat hunting activity. We recommend referring to our previously published advice on how to search System Log for any given suspicious session, user or IP. Please note that the majority of the indicators are commercial VPN nodes according to our enrichment information.
If you have any questions or concerns please do not hesitate to reach out to us at security@mazars.nl.
2. LOGGING IN AND CHANGE PASSWORD
Further information on how to log in and changing your password is set out below.
2.1. Signals username
2.1.1. What is my username?
Your Signals username is the e-mail address where you receive information on Signals. If you do not know your username, please contact your Forvis Mazars contact person or send an e-mail to signals@mazars.nl.
2.1.2. Can I change my username (e-mail address)?
If you want to change your username, please contact your contact person or send an e-mail address to signals@mazars.nl.
2.1.3. I do not have a personal e-mail address. How can I log in?
Signals only works with personalized usernames. Hence your username is your personal (and unique) e-mail address. This is how your personal environment is secured.
Do you not have a personal e-mail address, but you share it with a person who also wants to use Signals? If so, you are obliged to submit a personal e-mail address to your Forvis Mazars contact person.
2.1.4. I did not receive a username and password. How can I log in?
As a client of Forvis Mazars, you will automatically receive an e-mail stating your username and the option to create a password. Did you not receive this e-mail? Please contact your Forvis Mazars contact person or send an e-mail to signals@mazars.nl.
2.2. Signals password
2.2.1. Can I change my password?
You can change your password yourself. You can do so via the ‘My Profile’ button. You can request a new password if you click the button ‘Change password’.
2.2.2. What conditions does the Signals password have to meet?
Signals requires the use of a strong password. This means that, when changing the password, it needs to meet a number of conditions:
- is at least 10 characters long
- contains a lower case letter
- contains a upper case letter
- contains a number
- does not include (elements of) your username
- does not include your first name
- does not include your last name
- cannot be any of your last 10 passwords
2.2.3. I forgot my password, what can I do?
You can request a new password yourself. You can do so by clicking the button ‘Forgot password?’ in the login screen. Subsequently, in the next screen, enter your username (e-mail address) as held on record at Signals. Now click ‘Reset password’. You will receive an automated e-mail from Signals, enabling you to create a new password. If you did not receive an e-mail for resetting your password, please contact your contact person or send an e-mail address to signals@mazars.nl.
2.3. Multi-Factor Authentication
2.3.1. Why do I need Multi-Factor Authentication to log in?
Multi-Factor Authentication (MFA) is an additional security step used to access web applications such as Signals. MFA provides additional assurance that only authorised persons can access the data in the web application. With MFA, Signals meets the latest security standards
2.3.2. already use the OKTA Verify app. What should I do?
In that case, you don't need to download the app. You can directly register your device and link it to your Signals account. Go to Signals, log in with your email address and password and follow the instructions to link your device to your Signals account.
2.3.3. I have a new smartphone. How do I set-up OKTA on my new smartphone?
If you have a new smartphone and want to reconnect Okta Verify to your account: Please click here! After sending the email we can reset your Multi-Factor Authentication (MFA) account. After resetting your MFA account, you can log in again on www.mazarssignals.nl with your known credentials. In the next step, you can set-up your new MFA.
2.3.4. I don't have a smartphone, how can I log in?
Besides authentication via an app it is possible to confirm your identity by email. You can log in on www.mazarssignals.nl with your known credentials. In the next step, you can set-up your new MFA via email.
3. USE OF SIGNALS
Further information on using Signals, such as account management and any error messages, is set out below.
3.1. Account management
3.1.1. How do I add a new contact person?
By adding a new contact person, you can authorize others to view and/or submit returns for a company. If you want to add a new contact with corresponding authorisation, please contact your Forvis Mazars contact person.
3.1.2. What to do when a contact person leaves the company?
If a contact leaves the company and his/her access rights need to be cancelled, you need to notify your Forvis Mazars contact as soon as possible. The account of this user will be deactivated and, if required, a new account will be created for a new contact. You are personally responsible for notifying Forvis Mazars of any staff changes in a timely manner.
3.2. Various notifications in Signals
When using Signals, you may receive an error or ‘page not found’ message. Further information on what to do in that event is set out below.
3.2.1. Do you receive a ‘page not found’ message?
Perhaps the page you tried to access is no longer available. Try once more or log in again. If still unsuccessful, please contact us. You can either contact your Forvis Mazars contact person or send an e-mail to signals@mazars.nl.
4. OTHER QUESTIONS
Do you have any questions other than mentioned above? Please contact Signals Support by sending an e-mail to signals@mazars.nl or call +31 (0)88 277 11 11 (between 9.00 am and 5.00pm).