LSEG Authentication Service Transformation  /  Product Upgrade Workspace






Technology changes to
FXT/FXall login and authentication





 

As part of our efforts to continue to deliver high-quality and highly available services to our customers, we’ll be upgrading the technology infrastructure used to log into/authenticate Refinitiv platforms. This upgrade impacts users of FX Trading, FXall GUI, Deal Tracker, TPR and any Refinitiv product that currently authenticates via the Refinitiv AAA system (accessing the service via a corporate email address).

The new identity and access management services will improve performance, resilience and bolster security allowing us to provide new authentication options such as Enhanced Multi-Factor Authentication (MFA), and improvements to the password policy and login options in the future.

To avoid loss of service with your Refinitiv products you need to take action to prepare for the authentication platform change.

The upgrade is being delivered in two phases. Phase 1 requires customers to be technically ready to access the new services. This must be completed by June 2023.

Actions you need to take now:

  • Update network configuration

    • The new identity and authentication service is cloud-hosted and does not use static IP addresses.

    Internet & Delivery Direct

    You need to permit the following list of Fully Qualified Domain Names (FQDNs) according to your network delivery method.

    Note: You may have already allowed some of these domains as part of the rebranding changes made in 2021. Any existing whitelisted domains Refinitiv has previously communicated should not be removed.

    FQDN Delivery Protocol/Port Description New domain?
    *.refinitiv.com
    *.refinitiv.net
    *.refinitiv.biz    		 Internet
    Internet or Delivery Direct
    Delivery Direct    		 HTTPS/443 Login Authentication Password Reset No
    https://authenticator.pingone.com/ Internet HTTPS/443 Multi-Factor Ping Authenticator app Yes
    https://idpxnyl3m.pingidentity.com/ Internet HTTPS/443 Multi-Factor Ping Authenticator app Yes

    * Domains listed in the table are wildcard values, where a subdomain may prepend and/or append the listed domain

    **Login authentication is currently via the internet. Delivery Direct as a connectivity option will be introduced by Q2 2023.

    Delivery Direct

    To access new AWS service endpoints, customers using a private network must whitelist the following new IP addresses, which will impact Delivery Direct, FCN and CMC users.

    • 159.43.192.0/23 [AMERS]
    • 159.43.200.0/23 [EMEA]
    • 159.43.208.0/23 [APAC]
    To check if you are ready from a network perspective, click the link below to perform a system test (Windows and Mac):

    FX Trading and FXall GUI versions do NOT need to be upgraded, as the new CIAM system is compatible with all supported GUI versions.

    Will my login change?

    For the majority of users, end user credentials will not be changing. Note: a small number of end users may be required to reset their password ahead of the normal 90 day reset process.

    Phase 2 will start in July 2023, where Refinitiv will start to centrally switch users onto the new CIAM system. No Customer action is required as part of Phase 2.

    FXall users who currently use the legacy SiteMinder system (accessing the system using an FXall ID) and customers that currently use federation Single Sign On (SSO) do not need take to take action at this time. SiteMinder and SSO users will be contacted later with further migration instructions.

    We will provide further details regarding the exact date of the upgrade in Q2 2023; however, we do recommend that you review the frequently asked questions below to ensure that you are familiar with any changes required for this upgrade.

    Please forward this communication to your IT department for further review.

    If you have any questions, please contact your Refinitiv Account Team. Alternatively, click here to send an email and a representative will get back to you.

     

    Frequently asked questions

    What’s happening?

    As part of our efforts to continue to deliver high-quality and highly available services to our customers, we are upgrading the technology infrastructure you use to log into/authenticate yourself on the FX Trading and FXall® graphical user interface (GUI) and supporting websites.

    This upgrade won’t require any actions by users of FX Trading or FXall GUI who currently authenticate via the LSEG/Refinitiv AAA system (accessing the service via a corporate email address). FXall users who currently use the legacy SiteMinder system (accessing the system using an FXall ID) also need take no action at this time. SiteMinder users will be contacted later with further migration instructions.

    The new identity and access management services improves performance and resilience whilst bolstering security, allowing us to provide enhanced authentication options and improvements to password policies.

    The majority of customers who previously authenticated via the LSEG/Refinitiv AAA system migrated to our new CIAM system in H1 2025. Account Managers are now reaching out to customers to assist remaining customers with the migration.

    Will my old password still work?

    Your username will remain the same, so you’ll be able to login with your current credentials after the upgrade. When logging into FXT/FXall via the new authentication platform for the first time, you’ll will be asked to enter both your username and password. It’s important to make sure you remember your passwords or reset them in advance.

    As part of the continuing password authentication policy, you’ll need to enter your password each time you sign into the product.

    You’ll be able to change your password using the same options available today. These include:

    1. Forgotten password link on the login page
    2. By using Password Assistance

    Will my web apps bookmarks still work?

    Customers must ensure new FQDNs have been enabled, and upgrade their bookmarks by the end of March 2026.

    New FQDNs:

    FQDNs to be DISABLED (Q3 2026) New FQDNs Delivery Type
    apac1-fxt.trading.refinitiv.com apac1-fxallweb.trading.refinitiv.com Internet
    emea1-fxt.trading.refinitiv.com emea1-fxallweb.trading.refinitiv.com Internet
    amers1-fxt.trading.refinitiv.com amers1-fxallweb.trading.refinitiv.com Internet
    amers2-fxt.trading.refinitiv.com amers2-fxallweb.trading.refinitiv.com Internet
    apac1-fxt.trading.refinitiv.biz apac1-fxallweb.trading.refinitiv.biz Private
    amers1-fxt.trading.refinitiv.biz amers1-fxallweb.trading.refinitiv.biz Private
    amers2-fxt.trading.refinitiv.biz amers2-fxallweb.trading.refinitiv.biz Private
    emea1-fxt.trading.refinitiv.biz emea1-fxallweb.trading.refinitiv.biz Private
     

    New bookmarks:

    AMERS:

    Internet:
    https://amers1-fxallweb.trading.refinitiv.com/Apps/Fxall_Home
    https://amers2-fxallweb.trading.refinitiv.com/Apps/Fxall_Home

    Delivery Direct:
    https://amers1-fxallweb.trading.refinitiv.biz/Apps/Fxall_Home
    https://amers2-fxallweb.trading.refinitiv.biz/Apps/Fxall_Home

    EMEA:
    https://emea1-fxallweb.trading.refinitiv.com/Apps/Fxall_Home (Internet)
    https://emea1-fxallweb.trading.refinitiv.biz/Apps/Fxall_Home (Delivery Direct link)

    APAC:
    https://apac1-fxallweb.trading.refinitiv.com/Apps/Fxall_Home (Internet)
    https://apac1-fxallweb.trading.refinitiv.biz/Apps/Fxall_Home (Delivery Direct link)

    Will there be any change to Multi-Factor Authentication (MFA)

    As part of the upgrade, customers that currently use Multi-Factor Authentication (MFA) will continue to be supported. Users that access the service via the Internet and have MFA enabled will receive a onetime passcode via an email, SMS text message. This can be configured for each user separately. Users that access the service via Refinitiv Managed Connection and have MFA enabled, will receive a onetime passcode via email only.

    I am a Single Sign On (SSO) user. Will I be migrated?

    Federated Single sign-on (SSO) customers won’t be affected by this migration. Federated SSO customers will remain on the current AAA system for the time being.

    How will LSEG be upgrading the service?

    The new CIAM system is already in place. The majority of customers who previously authenticated via the LSEG/Refinitiv AAA system migrated to our new CIAM system in H1 2025. Account Managers are now reaching out to the remaining AAA customers to assist remaining customers with the migration.

    The requirement is for customers to validate that they have connectivity in place to access the new CIAM system and then arrange with their Account Managers for their users to be migrated.

    Refer to the Action Required section if you have not successfully validated your network readiness.

    What will the new login page look like?

    There are minor changes to the new login screen.

    1. New CIAM username/ password capture screen:
    2. New CIAM MFA capture screen for Internet customers:
    3. New CIAM MFA capture screen for Refinitiv Managed Connection customers:


    What if I use trade performing reporting (TPR) and business objects?

    If you access TPR and business objects via FXT and FXall GUI you may need to reauthenticate again. Please note that in due course all the services accessed from within the GUI will be moved to the new authentication platform and no additional authentication will be required. 

    Who will support me with this change?

    LSEG’s implementation management (for FXT changes) and sales success (for FXall changes) teams will support our customers in completing the required tasks to make sure you’re technically ready for the new CIAM platform.

    What if I use other products like Deal tracker feed or Workspace?

    Multiple LSEG/Refinitiv products will undergo the platform change independently and the fact that customers have moved to the new identity and access management platform with FXT or FXall won’t impact other products. The implementation management team will inform customers about any changes needed across all the products they consume. If they have not informed you, please be sure to ask.

    I am using Eikon® administration services today. Will I continue to use it after the change?

    Yes, you can continue to use EAS to administer your product. If there are any future changes to the administration service portal, we’ll inform you separately.

    My users access web apps via the FXT and FXall GUI. Will they have to authenticate again?

    If customers access web apps via FXT and FXall GUI, they may need to reauthenticate, please note that in due course all the services accessed from within the GUI will be moved to the new authentication platform and no additional authentication will be required.

    What will happen if I don’t perform the changes in time?

    If you don’t perform the necessary network changes, you’ll no longer be able to access the service after you have been migrated to the new CIAM system.

    My users open the MyAccount and “Contact us” functions from within the GUI. Will they have to authenticate again to access these sites?

    Yes, for a fixed timeframe customers may experience additional authentication requirement when accessing MyAccount or resetting passwords.

    How will users’ experience change after the move to the new platform?

    There are minor changes to the new login screen. Product functionality remains unchanged, these changes relate only to login/authentication process.

     
    Additional resources
     

    Ask a question

    We aim to deliver a world-class customer onboarding experience for LSEG solutions by knowing our customers, engaging proactively, and ensuring swift and accurate delivery of our products and services. If you have questions, we are here to help.