Linking PRODA, myID and RAM to Access NDIS Portals

Winter, EnableUs Community

So you’ve got your PRODA login, you can get in fine, but every time you try an NDIS portal it’s like, “Access denied.” It feels broken, but it’s actually doing what it’s designed to do.

Will, EnableUs Community

Yeah, and the missing piece is understanding there are really three layers here: first, there’s YOU as a person, second is your ORGANISATION, and third is what you’re actually allowed to do on behalf of that organisation.

Winter, EnableUs Community

Exactly. Your personal PRODA, or in the newer world your myID, is just your digital identity. It proves “I am Winter, I’m a real human.” But it doesn’t automatically prove “I’m allowed to act for ABC Support Services Pty Ltd.”

Will, EnableUs Community

And that’s where the organisation piece comes in. In PRODA, your business has to be registered separately using the ABN. That’s called organisational registration, and it’s usually done by the principal authority – so the director, owner, or sole trader.

Winter, EnableUs Community

Let’s walk that through. The principal authority logs into PRODA with their personal account, goes to the Organisations section, and clicks “Register New Organisation.” Then PRODA asks for the ABN.

Will, EnableUs Community

Once you put the ABN in, PRODA basically talks to the Australian Business Register behind the scenes and throws a few verification questions at you. These are not the kind of things someone could just Google.

Winter, EnableUs Community

Yeah, it might ask about the registration date, who’s listed as an associate on the ABN, or other details only the actual owner or director should know. You’ve gotta answer all three correctly to get through.

Will, EnableUs Community

If you bomb those questions, PRODA doesn’t let you fudge it. You have to go back to the Australian Business Register, get your details corrected there, and then try the PRODA organisation registration again once the ABR record actually matches reality.

Winter, EnableUs Community

Alright, so let’s say you pass the questions and the organisation is now registered in PRODA. At that point, PRODA knows two things: one, who you are as a person, and two, that your account is tied to this specific ABN as the principal authority.

Will, EnableUs Community

And that’s when the cool bit starts. The principal authority can go into that organisation record in PRODA and add other staff members. So if you’ve got a finance manager, a support coordinator, admin staff – you can bring them in under the org.

Winter, EnableUs Community

Those staff already need their own personal PRODA, right? So they create their personal accounts first, prove their own identity, then you search for them and link them to the organisation.

Will, EnableUs Community

Yep. And when you add them, you don’t just say “They work here.” You assign attributes – which is basically PRODA’s word for permissions. Attributes decide which portals they can touch and what they can do once they’re in.

Winter, EnableUs Community

So, for example, you might give your quality and compliance person attributes that let them use the NDIS Commission Portal, but maybe not touch other services your organisation uses through PRODA.

Will, EnableUs Community

And the big mindset shift is: logging into PRODA alone is never enough. You always need that triangle: your identity, your organisation registration, and the attributes or authorisations linking the two. Without all three, you just keep hitting those access errors.

Winter, EnableUs Community

Alright, let’s get concrete and talk portals, because that’s where people really feel the pain – “Why can’t I get into the Commission Portal?”

Will, EnableUs Community

Yeah. During your NDIS registration journey, the main PRODA-linked portal you’ll use is the NDIS Commission Portal. That’s where you submit your registration application, upload documents, manage the audit bits, respond to requests – all of that.

Winter, EnableUs Community

To get there, you go to the NDIS Commission website, click through to the portal login, and it’ll bounce you over to PRODA to authenticate. PRODA checks: are you a real person, and are you linked to a registered organisation?

Will, EnableUs Community

Then, once you’ve actually submitted a registration application and the system can line up your organisation details, it grants you access in the Commission Portal that matches your role and attributes in PRODA.

Winter, EnableUs Community

But if any part of that chain is off, you can still get “access denied.” Maybe your organisation isn’t registered in PRODA, or you’re not linked to it, or your attributes don’t include Commission Portal access yet.

Will, EnableUs Community

If you’ve double-checked all that – personal PRODA working, organisation registered, you’re linked correctly – and you STILL get blocked, that’s the moment to email NDIS Commission ICT Support. The address is nqsc.ictsupport@ndiscommission.gov.au.

Winter, EnableUs Community

When you reach out, include your ABN, where your registration is up to, and your role in the organisation. That gives them enough context to dig into the system side and sort out the access problem a bit faster.

Will, EnableUs Community

Now, let’s flip to myplace, because this is where things have changed. The myplace Provider Portal is moving away from PRODA and over to myID and RAM – that’s Relationship Authorisation Manager.

Winter, EnableUs Community

Yeah, depending on when you’re listening to this, PRODA access to NDIS portals is being phased out, and by 10 November 2025 it won’t be used for NDIS portals at all. So new providers really should be thinking myID and RAM first.

Will, EnableUs Community

With myplace now, when you hit the portal link on the NDIS site, you don’t see PRODA. You’re taken to myID, which is the Digital ID app on your phone. That proves who you are personally.

Winter, EnableUs Community

Then RAM steps in as the “who can you act for” piece. RAM links your personal myID to your organisation’s ABN, and sets what services you’re authorised to use on its behalf – like the myplace Provider Portal.

Will, EnableUs Community

For staff, each person needs their own myID account with their personal email. The principal authority in your business goes into RAM, sets up authorisations for each staff member, and ticks which NDIS portals they can access.

Winter, EnableUs Community

Staff then accept those authorisations through their myID app, and from that point, they just log into myplace with myID. PRODA’s not involved in that flow anymore.

Will, EnableUs Community

And the nice bit is, when someone leaves your organisation, you just revoke their RAM authorisation. Their personal myID still works for other government stuff, but they instantly lose access to your NDIS portals.

Winter, EnableUs Community

So whether you’re in the “old” PRODA world or the “new” myID/RAM world, the logic is the same: identity, organisation, authorisation. Once you see that pattern, all these different logins start to make a lot more sense.

Will, EnableUs Community

Alright, let’s talk about the nerdy but super useful bit – getting your client management software talking directly to NDIS systems using PRODA B2B devices.

Winter, EnableUs Community

Yeah, because if you’ve ever manually keyed a stack of payment claims into myplace, you know why people are so keen on automation. B2B devices are basically PRODA’s way of saying, “We trust this software to act for your organisation.”

Will, EnableUs Community

The first step is always: check your software provider’s instructions. But the general pattern is pretty consistent. The principal authority, or someone with the right attributes, logs into PRODA and goes to Organisations.

Winter, EnableUs Community

Then you select your organisation, scroll down to the B2B Devices section, and hit “Add B2B Device.” PRODA will create a unique device activation code.

Will, EnableUs Community

That code only lives for 60 minutes. So you don’t generate it and then go to lunch. You need to jump into your client management software and plug the code in within that one‑hour window.

Winter, EnableUs Community

Once the software gets that code, it uses it to set up a secure connection to the NDIS portals – things like submitting claims, pulling participant details, managing service bookings – all without someone having to log in interactively each time.

Will, EnableUs Community

Now, security-wise, those B2B devices don’t last forever. They automatically expire every six months. So twice a year, you need to extend or reactivate them, otherwise your nice smooth integration just… stops.

Winter, EnableUs Community

Services Australia does send multiple reminder emails before a device expires. Practical tip: don’t let those land in some forgotten inbox. Make sure the contact email for your PRODA organisation is monitored, and maybe set calendar reminders around that six‑month cycle.

Will, EnableUs Community

Because when a B2B device expires, your staff can usually still log into portals manually via PRODA, but anything automated through your software will start throwing errors. It looks like the software’s broken, but it’s actually that PRODA trust link that’s lapsed.

Winter, EnableUs Community

And this idea of “create a link, maintain the link” shows up beyond NDIS as well. PRODA is used to get into other government services – like the Australian Business Register for updating ABN details, or HPOS for health providers using Medicare, PBS, and the Immunisation Register.

Will, EnableUs Community

Each of those has its own linking steps, but the flow is similar: go to the service website, click login, PRODA authenticates you, and then the service checks if your organisation type or credentials make you eligible for access.

Winter, EnableUs Community

Some are “one link, many tools.” HPOS is a good example – once you’re linked to HPOS through PRODA, you can reach Medicare claiming, PBS, immunisation data, all from that single connection. You don’t redo PRODA linking for each individual function.

Will, EnableUs Community

As we move towards myID and RAM replacing PRODA for NDIS portals, that same pattern sticks around. myID handles your personal identity, RAM holds the business link and authorisations, and each service checks RAM to see what you’re allowed to do.

Winter, EnableUs Community

So if you learn the PRODA way now – identity, organisation, attributes, and keeping things like B2B devices up to date – you’re basically learning the mental model you’ll reuse with myID and RAM as the transition kicks in fully.

Will, EnableUs Community

Yeah, once it’s all set up and linked properly, the tech kind of fades into the background and just works, which is exactly what you want so you can focus on your participants, not your passwords.

Winter, EnableUs Community

Alright, we’ll wrap it there. If this helped clear up some of the mystery around PRODA, myID, and NDIS portals, stick around for future episodes where we’ll dig into more of the practical stuff.

Will, EnableUs Community

Thanks for hanging out with us. Winter, always a pleasure.

Winter, EnableUs Community

You too, Will. And thanks everyone for listening – we’ll catch you next time.