Katso identification system – Frequently Asked Questions

The Tax Administration offers introductory answers to frequently asked questions about the Katso system.

  1. Who can be a Katso Master User of an organization?
  2. Can I have a Katso ID if our company is still in the setup process and its registration in the Trade Register has not yet come through?
  3. It says in the User’s Manual that new customers can sign in with their personal Network Banking ID to apply for Katso ID.  Is this correct?  It seems strange that customers should use their personal ID, not their employer company ID.
  4. I provide accounting services for my customer companies.  Can I set up a Katso ID on behalf of my customer?
  5. Because I applied for Katso ID but did not sign in with an electronic microchip card or Network Banking IDs, I am expected to visit a tax office/point of Katso service to prove my identity (to show my driving license, passport or identity card) to facilitate activation of the Katso ID.  What is the time frame to do this?  When is the last date when I should visit the office?  Is it just one office or are there several?
  6. How does a Sub-ID get activated?  Do I have to visit an office to prove my identity?
  7. Can I set up a sub-ID for our external accountant?
  8. I have a Katso sub-ID.  Is upgrade to Katso ID a good idea?
  9. I have several Sub-IDs.  Can I upgrade all of them to Katso IDs?
  10. What do I need a Master User ID for?
  11. What does Katso PWD mean? And what does Katso OTP mean?
  12. I want to sign in.  Should I press the Katso OTP icon — or should I press the Katso PWD icon?
  13. I will soon run out of One-Time Passwords.  Where can I get a new List?
  14. I printed out a List of One-Time Passwords, but the One-Time Passwords do not work. Why?
  15. My old List of One-Time Passwords ran out.  So I printed out a new List of One-Time Passwords.  Will I now have to change my ordinary Password, too?
  16. I accidentally printed out two Lists of One-Time Passwords. Should I now use the first or the second printout?
  17. My Katso ID has been locked OR I ran out of One-Time Passwords. What to do?
  18. My sub-ID is locked OR I have forgotten the Password to my sub-ID. What to do?
  19. I have no printer.  How can I make the List of One-Time Passwords available?
  20. Why did my Katso ID lock up?  How can I unlock it?
  21. Now that my Katso ID is locked, I want to know whether my granted Authorizations still work or has the system locked them up, too?
  22. If the organization no longer has any Master User, will the organization’s sub-IDs continue to work?
  23. My organization has received an Authorization.  But it does not work, why?
  24. Why do I get the "Unexpected error" message instead Authorization details?
  25. Can one and the same Authorization be delegated to more than one employee?
  26. How can I cancel an Authorization after it is granted to someone?
  27. How can I repeat the sending of the approval link?

1. Who can be a Katso Master User of an organization?

The Master User must have the right to sign for the company, and this right should be registered in the Trade Register (for small firms and self-employed individuals, no formal checking of the right to sign for the company will be performed if the person has identified himself/herself electronically).  The Master User’s right to sign for the company can not only be based on Board membership but also on a procuration, in other words, the company has granted him the Master User full rights to sign for the company.  This decision and the signatory right called procuration must be registered in the currently valid Trade Register records.
Only in exceptional circumstances, Katso IDs can be issued to an estate of a deceased person or to a tax consortium.

2. Can I have a Katso ID if our company is still in the setup process and its registration in the Trade Register has not yet come through?

No, not yet. You can apply for a Katso ID but you cannot activate it before the company is registered and its setup process is complete.  The company data has to be recorded in the Trade Register so we can look it up.

3. It says in the User’s Manual that new customers can sign in with their personal Network Banking ID to apply for Katso ID.  Is this correct?  It seems strange that customers should use their personal ID, not their employer company ID. 

Yes, it is correct.  The necessity to ensure proper identification of all new users is the reason for this requirement.  We do require signing in with personal bank user IDs.  At this stage, no Katso ID has been issued to the user yet, so we have to make sure of a reliable authentication of a physical person who indeed has the right to sign for the company.  But later on, after the Katso ID has been issued, and the company has activated it, employees will sign in with the Katso ID(s) exclusively.
Then they will no longer have to enter their personal Network Banking user IDs.

4. I provide accounting services for my customer companies.  Can I set up a Katso ID on behalf of my customer?

No, unfortunately, you cannot set up a Katso ID for your customer, because only owners, trustees, board members and other persons with the right to sign for the company can set up a Katso ID.

5. Because I applied for Katso ID but did not sign in with an electronic microchip card or Network Banking IDs, I am expected to visit a tax office/point of Katso service to prove my identity (to show my driving license, passport or identity card) to facilitate activation of the Katso ID.  What is the time frame to do this?  When is the last date when I should visit the office?  Is it just one office or are there several?

The time frame is four weeks.  You should visit a tax office/point of Katso service.  In this case, you will have to pay a visit within four weeks.  Applications more than four weeks old will automatically be deleted, so then you have to write all the initial facts and information again.  An automatically generated e-mail message will arrive to remind you to visit us.  You can visit any tax office.  Even though the Finnish Tax Administration is divided into several jurisdictions and regions, you can visit any tax office for the purposes of identification for Katso.

6. How does a Sub-ID get activated?  Do I have to visit an office to prove my identity?

The sub-ID is ready for use.  As soon as the sub-ID has been set up, you can use it.  This is because sub-IDs are not associated with a personal identity code of any person/employee.

7. Can I set up a sub-ID for our external accountant?

No, not unless the accountant is your employee.  The local Master User of the Katso system can create sub-IDs for employees only.  They are considered genuine representatives of the company.  And because of that, you cannot create a sub-ID for an outside person.  For that, you use Authorizations.

8. I have a Katso sub-ID.  Is upgrade to Katso ID a good idea?

To upgrade the sub-ID means that somebody’s personal identity code would be associated.  Then the actual holder of the Katso ID can manage the ID (including changes of Passwords and Authorizations), and the Master User will no longer manage it.  The Katso ID is generally more useful and powerful than a sub-ID.

9. I have several Sub-IDs.  Can I upgrade all of them to Katso IDs?

No, the upgrade process can only concern one Sub-ID to be upgraded to a Katso ID.  Because the Katso ID is associated with the personal identity number of its holder, you will only be able to have one Katso ID.  All the necessary Authorizations should then be granted to the Katso ID that you have.

10. What do I need a Master User ID for?

The Master User signs in with the Master User ID. There are several organization management tasks (including setup of sub-IDs and Authorizations) that only the Master User can handle.  The software to use for this purpose is called the Management application.  Keep your Master User ID in a safe place.

11. What does Katso PWD mean? And what does Katso OTP mean?

Katso PWD = Katso Password.  If you press this icon you can sign in with your User ID and Password.  
Katso OTP = Katso One-Time Password.  If you press this icon you can sign in with your User ID, Password and One-Time Password.

12. I want to sign in.  Should I press the Katso OTP icon — or should I press the Katso PWD icon?

First of all, if you are a Katso sub-ID holder, only the Katso PWD icon will be open to you. If you are a Katso ID holder, both icons are available.  
The answer to your question is: press Katso OTP icon if you are signing in to use electronic-filing services that require strong authentication, and press Katso PWD icon if you are signing in to use less restricted, generally available e-services.

13. I will soon run out of One-Time Passwords.  Where can I get a new List?

To print out a new Katso Password list can be done either when you sign in to the e-service
and the interface prompts you to do so, or when you are in a Katso session.

14. I printed out a List of One-Time Passwords, but the One-Time Passwords do not work. Why?

You haven’t activated the List.  It is not good enough just to print out the List of One-Time Passwords.  Please write the ID of the List in the window and press Activate.

15. My old List of One-Time Passwords ran out.  So I printed out a new List of One-Time Passwords.  Will I now have to change my ordinary Password, too?

No, there is no need to change the ordinary Password because of that.

16. I accidentally printed out two Lists of One-Time Passwords. Should I now use the first or the second printout?

Use the second printout that you printed out last. First activate it, and then start using it.

17. My Katso ID has been locked OR I ran out of One-Time Passwords.  What to do?

If your Katso ID does not work because of lockup, or if you no longer have a valid List of One-Time Passwords, you should select ”Passwords and locked IDs” at Katso interface. Use your Network Banking ID or microchip card to sign in.  Alternatively, you can visit the tax office/point of service to sort out the problem.

18. My sub-ID is locked OR I have forgotten the Password to my sub-ID.  What to do?

The Master User for your organization can open your locked-up sub-ID, or if necessary, give you a new Password.

19. I have no printer.  How can I make the List of One-Time Passwords available?

Copy the List into a file — for instructions; see Passwords in Katso — detailed instructions.

20. Why did my Katso ID lock up?  How can I unlock it?

Automatic lockup will result if an incorrect password is entered three times.  Automatic lockup will also result if no activity has been observed for 15 months.  To unlock the ID, select ”Passwords and locked IDs” at Katso website. Use your Network Banking ID or microchip card to sign in.  Alternatively, you can visit the tax office/point of service to sort out these problems.

21. Now that my Katso ID is locked, I want to know whether my granted Authorizations still work or has the system locked them up, too?

This is no problem; the Authorizations will continue to be valid.

22. If the organization no longer has any Master User, will the organization’s sub-IDs continue to work?

This is no problem; the sub-IDs will continue to be valid.

23. My organization has received an Authorization.  But it does not work, why?

The Authorization should first be delegated to a Katso ID or to a sub-ID.  And furthermore, the holder of a Katso ID should approve it.  However, the holder of a sub-ID does not have to approve an Authorization, because it will be valid as soon as it is delegated.
However, another possible reason for your problem is that the Authorization may be temporary, in other words, it has been granted for a limited time only.

24. Why do I get the "Unexpected error" message instead Authorization details?

The Authorization has probably been granted to an organization, and it has the Katso Parallel Master role.  This role can only be given to a Katso ID.  Thus, the recipient or grantor cannot have the details displayed on his or her own display.  The correct way to grant such an authorization is to associate a filer role (such as Vero - Periodic tax return filer).  Later, the system will automatically remove the incorrect authorization from the system.

25. Can one and the same Authorization be delegated to more than one employee?

Yes, you can do that.  It can be delegated an infinite number of times.

26. How can I cancel an Authorization after it is granted to someone?

The Master User can sign in to the Katso interface (yritys.tunnistus.fi) to cancel an existing Katso Authorization. Select "I already have a Katso ID.  I want to manage its data and authorizations and adjust its settings", then go to Organization section and select Granted Authorizations.  Press Info, and then give the command to cancel the Authorization.  The same sequence is available to Parallel Master Users.
If the Authorization was granted with an online Power of Attorney, you can use the approval link, or visit a tax office handling Katso registration to cancel it.  The link was embedded in the received e-mail message (message received after approval).

27. How can I repeat the sending of the approval link?

The Master User — or Parallel Master — can send the approval link again for a Power of Attorney that was created.  The Master User can sign in to the Katso interface (yritys.tunnistus.fi) to copy the link.  First select "I already have a Katso ID.  I want to manage its data and authorizations and adjust its settings", then go to Organization section and select Created POAs.  Press Info to find the link in the list of POAs waiting for approval.  Then use Clipboard to copy the link into an e-mail message.