This article answers common questions about Access Identity, the single sign-on system now used to log in to Paytronix. Find answers about what it is, how logging in works, how to complete migration, and what to expect along the way.
General questions
What is Access Identity?
Access Identity is a unified single sign-on (SSO) system that replaces the standard Paytronix username-and-password login. It gives you a single set of credentials to access Paytronix and any other Access Group tools or modules you use.
Why are we moving to Access Identity?
It is the foundation for how the Access Group is building and expanding its products going forward. Migrating to it is the first step in a broader integration that will make it easier and more secure for all users to access Paytronix and other Access products. A single login means less friction for you as the platform grows and more tools become available.
What are the benefits of Access Identity?
Access Identity gives you:
One set of credentials: Use a single email and password to log in to Paytronix and any other Access Group tools or modules you use instead of managing separate logins.
Two-factor authentication: Your IT administrator can enable two-factor authentication (2FA) on your account for an extra layer of security.
Centralised user management: Administrators can manage all user accounts, permissions, and password policies from one place.
A platform built to grow: As new Paytronix products and modules become available, Access Identity gives you access to them without needing a separate login.
Who does this affect?
Access Identity affects all Paytronix merchant users, including administrators, managers, and anyone who logs in to the Paytronix platform. It applies to both new merchants setting up for the first time and existing merchants migrating.
Logging in
How do I log in after migrating to Access Identity?
You log in the same way as before. Go to pxsweb.com (or launch.pxsweb.com for the SMB portal), click the LOG IN WITH SSO button, and enter your email address. That's it. Access Identity handles the rest in the background.
As a new user, how do I set up my login?
You'll receive an email with instructions on how to set your password and complete your Access Identity account setup. Click Set Password in the email, then follow the on-screen steps. When prompted, select No, Paytronix Loyalty is my first Access product to create your account.
📌 Note: Your first name, last name, and email address are all required to create an Access Identity account. Make sure you enter this information correctly when creating your account.
Can I still log in with my username and password after migration?
No. Once your account is migrated, username-and-password login is disabled. Click the LOG IN WITH SSO button, and enter your email address instead. If you have forgotten your password, click the Forgot Password link on the Access Identity login screen, or contact your administrator.
Migration
What is the migration process?
Migration moves your existing Paytronix account from username-and-password login to Access Identity. Your user administrator can move users over individually or in batches.
How will I know it's time to migrate?
When your administrator triggers migration, you'll see a pop-up the next time you log in to Paytronix. The pop-up explains the migration and gives you the option to start. Click Start Migration to begin.
Is migration mandatory?
Yes. While you may be able to select Do it later to delay the prompt during the optional window (which is set by the administrator), migration is mandatory. Once the deadline passes, you can't defer it.
How do I complete the migration?
Click Start Migration when prompted on login.
Select No, Paytronix Loyalty is my first Access product.
Check your email for an activation code sent from Paytronix.
Enter the activation code sent to your email to complete your account setup.
How will I know if I've been migrated successfully?
Once migration is complete, you will see an Access dropdown in the top navigation bar of the Paytronix platform, which confirms you are logged in via Access Identity.
What if I use the same email address to log in to multiple merchants?
If you access more than one merchant using the same email address, you will not be migrated to Access Identity just yet. Contact your Technical Success Manager or Customer Success Manager for guidance on timing and next steps.
Two-factor authentication
What is two-factor authentication?
Two-factor authentication (2FA) is an optional security feature that your IT administrator can enable for your account to add an extra layer of protection.
What happens if 2FA is enabled for my account?
If 2FA is enabled:
You'll be prompted to set up 2FA during your first login.
Follow the on-screen instructions to configure your preferred 2FA method.
Complete the verification process.
Save your backup codes in a secure location.
If you need help with 2FA setup or run into issues, contact your IT administrator. For detailed guidance, refer to the Two-Factor Authentication article.
For user administrators
Where do I manage Access Identity for my team?
In the Paytronix platform, search for and select Access Identity Migration in the left navigation to open the Access Identity Migration Management page, where you can manage and monitor migration for all users in your organization.
How do I migrate my users?
You can migrate users individually or send a bulk invitation to all users at once. From the Access Identity Migration Management page, you can select users and trigger invitation emails. Users receive an email prompting them to complete their Access Identity setup.
Can I track who has completed migration?
Yes. The Access Identity Migration Management page shows the status of each user's migration so you can see who has completed the process and who has not.
What happens when a user clicks Do it later instead of Start Migration?
There is no option to decline migration. Clicking Do it later only defers the prompt for 24 hours, after which it reappears on the next login. Once the administrator-set forced deadline passes, the Do it later option is removed entirely, and migration becomes mandatory for that login.
What if our organization already uses SSO with Azure AD, Okta, or another provider?
If your organization uses its own identity provider, such as Azure Active Directory (AD), Okta, or Active Directory Federation Services (AD FS), you can set up federation — a connection between your identity provider and Access Identity — so that your users continue to authenticate through your existing provider, which means your users do not need to create separate Access credentials. Access Identity works seamlessly alongside your existing setup.
Contact your Technical Success Manager or Customer Success Manager to get started with federation setup. Initially, the config process will require IT assistance from both the customer and the Access team.
⚠️ Important: Federation requires your identity provider to support OpenID Connect (OIDC) and be publicly accessible via HTTPS. All users must use email addresses on a company-owned domain. Shared domains like gmail.com or outlook.com are not supported.
Troubleshooting
What should I check when a user does not receive the verification code email during the migration process?
The email verification step is required. Make sure the verification emails, which have a sender of [email protected], are not blocked by your email provider.
⚠️ Important: You may need to work with your IT team or email admin to allowlist the [email protected] address. Email verification is an Evo platform requirement and cannot be made optional.
What should I check when a user is unable to log in after migration?
Confirm the user completed all steps in the migration email, including setting a password in Access Identity.
Check that Enforce Login Using SSO is enabled on the user's account in Paytronix.
Verify the user's email address in Paytronix matches the email address they used to set up their Access Identity account.
If the user has used the same email address with more than one merchant, update the user's email address to be different for each merchant they need to access.
If more than one person is using the same email address, update each user to use a unique email address.
What should I check if two-factor authentication isn't working?
Verify your mobile device's time settings are correct.
Check that you're using the correct authenticator app.
Contact your IT administrator if you need to reset your 2FA settings.
What should I check if I see an error after logging in with federation?
Confirm the redirect URI in your identity provider exactly matches https://identity.us.access-evo.com/auth/oidc/callback.
Verify the Authority URL and Client ID are correct.
For AD FS, confirm the email claim is configured, and the email scope is permitted.
If domain verification failed, allow up to 48 hours for DNS propagation and verify the TXT record is correct.
Additional resources
For additional assistance, please contact your Technical Success Manager or Customer Success Manager.