Scheduled maintenance is currently in progress. We will provide updates as necessary.
Posted Apr 18, 2025 - 12:00 EDT
Scheduled
Starting on May 16, 2025, the VCAS Portal will transition its sign-in process to Visa Access (formerly Visa Online) for all external users, completing by May 19, 2025. Post-migration, all VCAS users will access VCAS through the Visa Access URL: https://www.visaonline.com/login. This change is driven by our commitment to maintaining the highest standards of security and compliance. With the new PCI 4.0 requirements going into effect in 2025, we are required to implement multifactor authentication (MFA) to remain PCI compliant and retain our PCI certification. By transitioning to Visa Access, we are not only meeting these compliance requirements but also enhancing your login experience with improved security and convenience.
We are dedicated to ensuring a smooth transition with minimal disruption to your operations. Find below the key steps you need to take to prepare for the migration and resources available to help you navigate this change seamlessly.
Key Things to Know:
Update VCAS User Credentials: Users must ensure that their usernames and corporate email addresses are updated by their Admin in the VCAS Portal by the following deadlines:
NEW DATE: Staging environment: April 18, 2025 by no later than 20:00 UTC NEW DATE: Production environment: May 2, 2025 by no later than 20:00 UTC
User Creation Freeze Periods: During the migration period, no new users can be edited or created. Freeze dates as follows:
NEW DATES: Staging environment: Starting on 20:00 UTC April 18, 2025 - May 2, 2025 NEW DATES: Production environment: Starting on 20:00 UTC May 2, 2025 - May 18, 2025
Usernames meet the minimum length requirement of 10 characters.
A valid corporate email is loaded for each user being migrated (personal email addresses like @gmail.com are not acceptable).
Impact to SFTP Reports: For customers receiving our VCAS SFTP reports today, please note the below reports will be impacted due to this migration:
User Access Report (UAR): The classifications related to a user's account status will be changed. The following new statuses will be reflected in the UAR: Pending, Active, Disabled, and Delete_Pending Violation Report: This report will be unavailable for a period of time due to a limitation in the data that is currently sent in that report. We are working with the Visa Access team to evaluate when this report can be supported in the future. The current timeline is FY26.
First Time Login to VCAS Post-Migration:
The first-time login experience will depend on how your user account was migrated. If you already had an active Visa Access account at the time of migration, you would log in at https://www.visaonline.com/login using your existing Visa Access account information. If not already set up, you will be prompted to set up your multi-factor authentication (MFA) preferences and security questions, and all users will be prompted to change their password. Once login is complete, VCAS portal will be accessible in the My Services dashboard. Please see document VCAS Portal User Login Flows on Visa Access for more details on first time login.
If you did not have a Visa Access account at the time of migration, you will log in at https://www.visaonline.com/login using your current VCAS portal username and password. The VCAS username will become your Visa Access username. After entering your credentials, you will be prompted to complete the setup your MFA preferences, security questions, and change your password. Once login is complete, VCAS portal will be accessible in the My Services dashboard. Please see document VCAS Portal User Login Flows on Visa Access for more details on first time login.
Note: Current Federated SSO VCAS issuers will maintain their current login process with Visa Access. For more details on the migration, please refer to the FAQs page (https://visa.highspot.com/items/67d897cc62dd4456eb238110) or do not hesitate to contact your Local VISA support if you have any questions or concerns.