Sales Tax Login Authentication Guidelines

Federal Board of Revenue has issued Sales Tax Login Authentication Guidelines for taxpayers/ users of IRIS portal.

The  Device  Registration  and  Management  System  has  been  developed  by  Pakistan  Revenue Automation (Pvt.) Ltd. (PRAL) for the Federal Board of Revenue (FBR) to enhance security and streamline access to the Sales Tax System. This system is designed to ensure that only authorized devices can log in, significantly reducing the risk of unauthorized access and potential data breaches. By incorporating a structured registration and validation mechanism, the system safeguards taxpayer information while providing users with a seamless login experience.

This initiative is part of FBR’s broader effort to modernize and secure digital tax operations, offering an additional layer of authentication for system access. With businesses and taxpayers increasingly relying on digital platforms for tax compliance, it has become essential to implement robust security measures. The device registration process not only strengthens authentication but also allows users to manage multiple devices efficiently. This manual serves as a comprehensive guide, outlining each step required to register, validate, and manage devices within the system.

Objective of Sales Tax Login Authentication Guidelines

The primary objective of this manual is to provide users with a clear and detailed understanding of the Device Registration and Management System to enhance security and facilitate seamless access to the Sales Tax System. The system aims to:

• Strengthen security by restricting system access to registered and verified devices.
• Protect sensitive taxpayer data from unauthorized access and potential cyber threats.
• Provide a user-friendly process for registering, validating, and managing multiple devices.
  Enable users to securely de-link devices when they are no longer in use or need to be replaced.

Ensure compliance with FBR’s authentication requirements, improving overall system security and user confidence.

Scope of the Document

This document provides a step-by-step guide for taxpayers, business entities, and authorized personnel who need to access the Sales Tax System securely through registered devices. It covers essential procedures, including device registration, validation, multiple-device management, and de-linking of devices when necessary. The document is intended for all users who are required to authenticate their devices before accessing the system to ensure compliance with FBR’s security protocols.

Registering Your Device

1. Log in to your Iris account on your system and the Tax Asaan Mobile Application on the mobile device you wish to register. Use your Registration Number and password, then click Login on the system and Sign In on the mobile app to proceed.
2. A QR code will be displayed on your computer screen for device registration to be scanned from your mobile device.
3. Click on the Login Authenticator to scan the QR code from your mobile device.
4. After scanning the QR code, the following screen will appear on your mobile. Click Get Your Device Registered to proceed.
5. The application will prompt you to grant location access for Tax Asaan. Click Allow Once to continue with your mobile registration.
6. Enter the required device details on your mobile device and click OK.
7. An OTP (One-Time Password) will be sent to your registered mobile number. A message will appear on your screen notifying you that the SMS code has been sent successfully, click OK to confirm
8. Retrieve the OTP from your messages, enter it in the provided field, and click Verify.
9. A message will appear on your screen, notifying the successful registration of your device; click OK to confirm.
10. Once your device is successfully registered, a pop-up notification will appear on your system’s screen.

Login Through MFA Using Your Linked Device

1. After completing your device registration, open the IRIS 2.0 link on your computer. Enter your Registration Number and Password, then click the Login button.
2. After clicking “Login,” a screen displaying a QR code will appear. Scan the QR code using the mobile app on your linked device, then click “Proceed” on your computer. You will be redirected to the IRIS dashboard.

Validating Your Device

Once your device has been registered, complete the validation process as follows:

1. A device validation pop-up will appear on your screen upon successful registration of your device. Click Validate your Device to proceed.
2. A QR code will be displayed for validation. Scan the QR code using your registered device.
3. Upon successful validation of device, a message will appear on your screen about successful validation of your mobile device. Click Ok.
4. Upon successful validation, a message will appear confirming the validation on your computer.

Registering Multiple Devices

If you need to register additional devices, you can do so using either of the following methods: Method 1: Add a Device from Your Computer

1. Once you log in to your account after scanning, you can click on the ‘Add Device’ button on the QR code screen, as shown in the image below.
2. A confirmation pop-up will appear. Click Proceed to continue.
3. A new QR code will be displayed in the Register Your Device pop-up.
4. Use your mobile device to scan the QR code.
5. Follow the registration steps as described in the Registering Your Device section to complete the setup.

Method 2: Add a New Device from the Dashboard

1. Log in to your system account. After logging in, you will be directed to the Dashboard.
2. Click the dropdown menu next to your profile icon and select Register New Device.
3. A QR code will appear on the screen.
4. Use the new device you wish to register to scan the displayed QR code.
5. Complete the registration by following the steps outlined in the Registering Your Device section.

De-linking a Registered Device

To remove a previously registered device from your account, proceed as follows:

1. Navigate to the Registered Devices section within your account settings. Click Registered Devices.
2. A list of all registered devices associated with your account will be displayed on Registered devices screen. Locate the device you want to remove and click Remove Device.
3. A confirmation pop-up will appear to delink the last registered device; click Yes to proceed.
4. You can also delink your mobile from your system This requires logging into the Tax Asaan portal from the same mobile device and de-linking it from.

The linked devices will be delinked.