Set up MFA for your admin account

In this article

Requirements

Available MFA factors

Set up MFA in a district on the Authentication engine

Set up SMS MFA

Change your phone number

Add an authenticator app

Sign in using MFA

Troubleshooting

Protect your admin account with multi-factor authentication (MFA). MFA adds a critical layer of security by verifying your identity with a second factor, such as an SMS code or an authenticator app. This helps prevent unauthorized access if your password is compromised.

MFA is mandatory for all SchoolDay admin users. The factors you use depend on your account type:

• Districts on the Authentication engine: an authenticator app.
• Other districts: SMS, which is enabled by default. You can add an authenticator app for enhanced security.
• Vendors: SMS.

To activate MFA for non-admin users, see Enable Passport Login for your organization. 

Requirements

• District Admin, Primary District Admin, and Vendor Admin permissions.
• (District admins only) Installing Google Authenticator, Microsoft Authenticator, Authy, etc., on a smartphone to use the Authenticator App MFA.

Available MFA factors

SchoolDay supports multiple authentication factors to help secure user accounts. You can enable one or more factors, depending on the level of protection needed.

• SMS Mobile phone: Requires a mobile phone or email. Users receive a one-time code and enter it with their password.
• Authenticator App (TOTP): Optional secondary factor. Requires a compatible app. Users enter the temporary code generated by the app along with their password.

Set up MFA in a district on the Authentication engine

You set up your authenticator app the first time you sign in.

1. Go to sso.schoolday.com, and then select your organization.
2. Enter your username and password, and then select Sign in.
3. When prompted, scan the QR code with your authenticator app.
4. Enter the code from the app, and then select Verify.
5. Copy your recovery codes, and save them in a secure place.

Set up SMS MFA

This section applies to vendors and districts not migrated to the Authentication engine. SMS is on by default. The first time you sign in, you enter the phone number to use for MFA.

1. Go to sso.gg4l.com, and then select your organization.
2. Enter your username and password, and then select Sign in.
3. When prompted, enter the phone number to use for MFA.
4. Enter the verification code, and then select Verify.
5. Copy your recovery codes, and save them in a secure place.

Change your phone number

If you get a new number, update it right away. SMS is required, so you can’t sign in if your registered number is no longer active.

1. Go to Connect > profile settings > My Profile.
   
2. In the SMS section, select Edit.
3. Enter your phone number, and then select Continue. SchoolDay sends a verification code to that number.
4. Enter the verification code, and then select Verify.

Add an authenticator app

This section applies to district admins in districts not on the Authentication engine. Vendor admins can’t use an authenticator app.

From My Profile

1. Go to Connect > profile settings > My Profile.
2. Turn on the Authenticator App toggle.
   
3. Scan the QR code with your authenticator app.
4. Enter the code from the app, and then select Verify.
5. Copy your recovery codes, and save them in a secure place.

During sign-in 

1. Go to sso.gg4l.com or sso.schoolday.com (Authentication engine) and select your organization.
2. Enter your username and password, and then select Sign in.
3. When prompted for a phone number, select Set up Authenticator App.
4. Scan the QR code with your authenticator app.
5. Enter the code from the app, and then select Verify.
6. Copy your recovery codes, and save them in a secure place.

Sign in with MFA

After you set up MFA, you enter your password and then your second factor each time you sign in. For the steps, see Sign in to SchoolDay with MFA.

If you sign in with a recovery code, MFA turns off right away. Set up your MFA factors again the next time you sign in.

Verify the configuration

• Sign out and sign back in. You should be prompted for your second MFA factor before you reach the SchoolDay dashboard.

Troubleshooting