Apologies if I am asking a really dumb question but I have just started to look at using the prepopulation API in my day job where we use BTC tax software. There are 4 people dealing with tax return preparation, well over 1,000 returns a year.
My first timid look at setting up the authorisation seems to indicate that each individual user will need to use the 2SV each time they want to download data to a return, or at the start of each session, or something. I appreciate that we are meant to be ultra secure these days but how can this be practicable if we are all sitting waiting for a text or phone call with an authorisation code each time we want to work? Or am I getting entirely the wrong end of the stick and is the 2SV a one time only thing for the firm as a whole or for each relevant staff member?
A query email to HMRC for help elicited a stock response which totally ignored the subject of the question so before proceeding any further I am hoping the collective wisdom of the Aweb community can shed some light on the subject. I also have access to Taxcalc so will explore how that deals with the question to see if it helps.