As we outlined on 17 July 2024, we are looking to make some improvements to our security requirements from 22 October 2024 to better protect our data and resources.

Online security risks are constantly evolving, which means that we need to adapt in the way that we defend our systems and data.

We offer applications that can be accessed online (like Chorus Portal and the Assurance Website), or via a mobile device using an @Chorus.co.nz login. We use Microsoft Entra ID (previously Azure) to manage login and security.  

What you need to know 

We have received feedback from our Partners who use Chorus systems which has meant that we will be making amendments to our delivery schedule for these changes. 
 

22 October 2024

To reduce this security risk and align to security best practice, we can confirm the following measures will be enabled: 

Enabling Multi-Factor Registration

We need to ensure that all users of the @chorus.co.nz login are setup with Multi-Factor Authentication (MFA). From 22 October 2024 those not MFA registered will get prompted to do so. However, users not registered are able to start now to set up authentication. We will be encouraging all users to have two different interactive MFA methods setup. E.g. MFA Application and phone number. 

Implementing Account expiry 

Accounts not used in 180 days will be made inactive, with inactive accounts then being deleted after 13 months.  

As we need to allow a period of time for all users to have their MFA registration setup, as well as the end of year brown out periods, we have decided to move a number of security changes including the enabling of Multi-Factor Authentication on Chorus Applications to the new year. 

Mid-February 2025

Chorus will enable these Security features:

• Ensure Multi-Factor Authentication is applied.
• Stop remembering previous authentication.
• Remove the stored browser credentials.
• Implement better rules for how long a login session can last.

Further details will be provided on the specifics of the February deployment.

Please share this message with your operational staff and ensure that any automation that you have built is ready.

Contact

If you have any questions, then please reach out to your friendly Chorus Customer Engagement team.