Login methods reference
Specifications, requirements, and supported configurations for IdP SSO, Passport Login (MFA), and ID Card.
|
Method |
Best for |
Requires IdP |
MFA support |
Password-free |
|---|---|---|---|---|
|
IdP SSO |
Staff and teachers with managed district accounts |
Yes |
Via IdP only |
Yes (SSO token) |
|
Passport Login (MFA) |
Any user group requiring two-factor authentication |
Yes |
Yes (built-in) |
Optional |
|
ID Card (QR Code) |
Students, especially grades K–6 |
No |
Yes |
Yes |
IdP SSO
|
Field |
Details |
|---|---|
|
What it is |
Users authenticate with their existing district account via SAML or OAuth. SchoolDay verifies identity with the configured IdP. |
|
Required role |
District Admin |
|
Required infrastructure |
Active IdP (Google Workspace, Microsoft 365, Azure AD, ADFS, LDAP, or Shibboleth) |
|
Supported IdPs |
Google, Office 365 / Azure Active Directory, Active Directory / ADFS, LDAP |
|
Protocols |
SAML 2.0, OAuth |
|
Not supported for |
Users who are not provisioned in the organization’s configured identity provider, including students without managed district accounts (e.g., young students). |
|
Setup instructions |
Supported authentication factors
|
Factor |
Use as |
|---|---|
|
AD / LDAP |
First factor only |
|
Face ID |
Second factor only |
|
ID Card (QR Code) |
First or second factor |
ID Card
|
Field |
Details |
|---|---|
|
What it is |
A printed QR code card. Students hold the card to a webcam to sign in — no password required. |
|
Required role |
District Admin (to activate); Admin or Teacher (to generate cards) |
|
Required hardware |
Devices with webcams |
|
QR code scope |
Tied to student profile — not invalidated by school reassignment |
|
Setup instructions |
Combining methods
Multiple login methods can be active simultaneously for the same organization. Each method is configured separately under Connect > Administration > Login Methods.
Example configuration:
|
User group |
Method |
|---|---|
|
Teachers and staff |
IdP SSO (Google) |
|
Students grades 7–12 |
Passport Login: AD + QR Code |
|
Students grades 1–6 |
Passport Login: Face ID only |