Moving from Shared Agency Logins to Individual Users (2FA Rollout)

Deadline: September 10, 2026.

Shared "SPOC (Singe point of contact)" agency logins will stop working after this date. Every agency user needs their own individual Hireport login before then.

Introduction

HirePort has turned on two-factor authentication (2FA) for all accounts, which means shared agency logins (SPOC accounts) can no longer be used. This article explains why the change is happening and walks customers and agencies through switching to individual logins.

Why this is changing

HirePort recently enabled two-factor authentication (2FA) on all accounts. 2FA adds a second layer of verification on top of passwords, to protect your data and your candidates' data.

2FA is set up per person, on that person's own device. That's incompatible with the old pattern where an agency shared a single login, a SPOC (single point of contact) account. A shared login can't be tied to one person's 2FA device, so it can no longer be used safely.

Going forward, every individual at an agency who needs access must have their own named HirePort login.

What customers need to do

You'll do this once per agency you currently have only one email address registered for.

Step 1: Wait for your agency's email list via Agency Chat

Each of your agencies has been asked to send you the full name and email address of everyone at their company who needs access, using the Agency Chat inside HirePort.

If this is taking too long, I'd recommend asking them again.

Step 2: Invite each person individually

Once you have the list, go to Agency Management and invite each email address as its own contact (rather than reusing the old shared address):

1. Go to Agency Management and click Add Agency.

2. Click Agency list and name that list after the agency company name.

   Enter the person's email address and full name, select the relevant contract, and choose the transaction currency.

3. Click Send invite so the invitation goes out immediately.

4. Repeat for every email address the agency sent you.

Invite emails occasionally land in spam. If an agency contact says they haven't received anything, ask them to check their spam folder before resending.

Everyone on the list automatically gets access to whatever jobs you assign to that list.

What agencies need to do

Step 1: Compile your team's access list

Make a list of the full name and work email address of everyone at your agency who currently uses the shared login, or who should have access going forward.

Step 2: Send it to your customer via the Agency Chat

Message your contact at the customer directly through the Agency Chat in HirePort, with the full list of names and email addresses. This is the channel the customer will be expecting it on: please don't send it by email or another channel, so nothing gets missed.

Step 3: Accept your individual invite and set up 2FA

Once the customer invites you, you'll each receive your own invite email (also check your spam inbox). On first login, you'll be asked to set up 2FA on your own device: this takes about a minute and only needs to be done once per person.

Help & Support

If you still need assistance, please contact support@hireport.io