Households
Much like in Banno Business, credit union retail accountholders can form an organization to share accounts across multiple different digital accountholders. This creates the concept of households, a group for an account that can involve several accountholders.
This gives the new joint accountholder their own digital identity, separate from the primary, while also giving accountholders who are joint on only shares or loans their own digital identity.
Self-enrollment
Joint users can also self-enroll, creating their own users associated with a given primary account. In order to self-enroll, the joint user must have the following information:
- The joint user’s social security number
- The member number of the primary accountholder
- The joint user’s phone number
- The joint user’s email address
If a name record on the membership is found with matching information with a type of joint, that user is automatically granted access to shares and loans on the membership they are joint on.
If no joint name record is found at the membership level, that information is then matched on the share/loan level.
If no joint name record can be found, the enrollment fails.
After enrollment and two factor authentication setup is complete, the joint user is automatically logged into Banno, and has access to the following information:
- Joint users at the membership level
- These users have access to all shares and loans on the membership. If the joint user has access to accounts on other memberships and a preference access record links the accounts, those accounts will also display.
- Joint users at the share/loan level
- These users will have access to any shares or loans that have a name record with a matching social security number in the membership. If the joint user has access to accounts on other memberships and a preference access record links the accounts, those accounts will also display.
By default, the joint user has access to the following features:
- Bill pay
- Card management
- Remote Deposit Capture
- Stop Payments
- eStatement Enrollment
Allowing and Blocking Membership Types From Joint Self-enrollment
Credit unions can configure membership account types they wish to block from self enrollment by navigating to → Settings → *Enrollment → Joint users self-enrollment. This field can be configured for account types from 00-99 or from 0000-9999, accepting ranges or individual account types. If a user of the given account type attempts to self-enroll, they are blocked from completing the enrollment.
The toggles on this page also gives credit unions control over which types of joint users are allowed to self enroll, using the following toggles to determine how Banno looks for the joint user’s name record:
- Member account name
- Banno looks at the membership level for a joint name record.
- Share name
- Banno looks at individual shares for a joint name record.
- In-house loan name
- Banno looks at individual in-house loans for a joint name record.
- External loan name
- Banno looks at individual external loans for a joint name record.
Manually Creating a Household
While households are automatically created when the first accountholder on a membership self-enrolls, one can manually be created by an admin user under the Users page in Banno People. The Create organization button opens a prompt to enter the 10-digit symitar account number of the primary accountholder for the organization, as well as an option to mark this as a Retail or Business organization. Please note:
- Each household must be tied to a member number.
- Only one household can be tied to a member number at a time.
The household created pulls the following information from the primary name record:
- Household name
- Last name field
- Household phone number
- HOMEPHONE field
- Household email address
- EMAIL field
- Household address
- STREET, CITY, STATE, and ZIPCODE fields
The household is now available to add users to.
Manually Creating a Household User
The household’s profile page contains a Users section. From there, an admin user can use the Create user + button to create a user. The following information must be provided:
- First name
- Last name
- Email address
This creates a user with the User role. At this point, the admin user must select which shares and loans the organization user has access to, with the following conditions:
- All shares and loans (internal and external) will be displayed.
- Shares and loans from other memberships will be displayed if the primary owner has a preference access record linking to another membership.
- IRAs will be displayed.
- CDs will not be displayed.
After the desired shares and loans have been selected, everything is ready to send an invite to the new user. However, by default, manually created household users have no permissions set to active. The admin user must manually set the functionality required by the digital-only user. Available features include:
- Transfers
- Conversations
- Accounts and transactions
- Bill pay
- Stop payments
- Card management
- Remote Deposit Capture
- Statements
After the required features are selected, you may send an invitation to online banking to the household user. This end user will access Banno Apps like any other user with the permissions activated for that user.
Migrating to Households
Credit unions have the option to migrate all traditional retail users to households, provided they only have primary users logging into Banno today. The first time a traditional retail user logs in, their account will be automatically migrated into a household. Any non-primary users that wish to have access to digital will need to self-enroll and will be added to the same household as the primary user.
Prerequisites
In order for a credit union to be eligible to use this solution, the credit union must:
- have SymXchange based on the latest SymXchange blueprint
- be an existing customer of Banno and only have primary users enrolled in Banno
How does it work?
Today, a user’s credentials are stored in a preference record in Symitar. Only one user per membership is allowed to self-enroll as Banno only allows for one preference record per membership. To allow additional users to have digital access, a second preference record needs to be manually created in Symitar with the user’s credentials. This allows the user to bypass the self-enrollment restrictions and simply log in with the credentials in the preference record.
With households, both a primary and a joint user can have their own separate digital access to their accounts. New primary and joint users can self-enroll and will be added to a household under the primary accountholder. Primary user’s that already have access to Banno will need to be migrated in order to join the household. Once the migration is enabled, the next time a primary user logs in, their account will be silently migrated to a household using their existing credentials and details from the primary name record.
If an error is encountered during the migration, all changes will be rolled back automatically and the user will be directed to their dashboard. There will be no indication to the user that the migration was attempted and encountered an error.
Post-Migration Updates
After a successful migration, the only difference users will notice is the name of the household below the welcome text in Banno. The household name will be populated with the user’s first and last name.
A credit union employee will notice several differences when viewing a user that has been migrated:
- The name of the household will appear under the user’s name, with a link to the household’s profile.
- The cards that display on the user’s Overview tab will change. Only About, Organization user permissions, and Payments will display.
- The Permissions tab will change and there will be new cards for Organization user permissions, Accounts, and External Applications.
- The Card Management card will no longer display. The … (View more) menu will contain new options and there will be new options for Edit profile, Delete user, and Hold account access.
Note: Migrated users will lose access to several features if they are off for the credit union and overridden for the user. This is due to the move from permissive permissions to restrictive permissions. With restrictive permissions, there is no way to override the institution configuration. This will apply to the following:
- Self service forms
- RDC
- Bill Pay
- Transfers
History Events
A new history event is captured when a user is successfully migrated. When complete, the credit union will see an event that states Successfully migrated retail user to household.
Reporting
In order to determine which users have been migrated, failed to be migrated, or have not been migrated, the User Mapping report has been updated with additional fields that are available to all credit unions regardless of whether they are using the household feature. This report can be found under Admin > Reports > + Create Request > Engagement > User data.
Of these new fields, the following was added as part of this project and is available to all credit unions:
- First name
- Last name
- Email address
- Member number
When a credit union is configured to allow existing users to be migrated, an additional Household column will display in the User Mapping report. The Household column can have the following values:
Yes: The user has been successfully migrated to a householdNo: The user has not been migrated to a household; this means they have not yet logged in since the migration was enabledError: A migration for the user was attempted and failed; investigation by the financial institution and potentially Jack Henry is needed
Shares/Loans Display Rules
Please be aware of the following summary of scenarios that may occur when migrating users:
- Shares/loans are only displayed if the logged in user has a name record with access to the share/loan that is linked via preference access record.
- Any share/loan on a membership that is not linked via preference access record with a matching name record will not display.
- Valid access types includes:
- Primary on the membership linked via preference access record
- Joint on the membership linked via preference access record
- Joint on the share/loan linked via preference access record
- If a user is joint on shares/loans from other memberships, those shares/loans can display if the membership has a preference access record connecting the two memberships.
- Any share/loan on a membership that is linked via preference access record will display if there is a matching name record on the shares/loans.
- If the user’s primary membership is not linked via a preference access record, none of the shares/loans on that membership will display.
- If the user’s primary membership is linked via one or more preference access records, any share/loan that is linked via preference access record will display without a name record on the individual shares/loans.
- For joint users, CDs, IRAs, or loans are not displayed by default unless there is a matching name record on the individual share/loan.
- Primary users have access to all shares/loans, including CDs and IRAs.
- Joint users that are joint on the entire membership will not automatically have access to CDs, IRAs, or loans unless they have a name record on the share/loan.
- Joint users enrolling under a joint membership will see the shares/loans from their primary membership if there is a preference access record to the shares/loans from their primary membership. Only shares/loans linked via preference access record will display.