Set up MFA for your Admin account
Enable multi-factor authentication for your account in your user profile settings.
In this article
To improve security for your admin account, you can set up Multi-factor authentication (MFA). MFA provides you with a more secure login process. It grants additional security if anyone other than you attempts to log in to your SchoolDay profile using your account.
Note: As part of improving the overall security, MFA is now mandatory for all SchoolDay Admin accounts.
Secure MFA based on combining two factors:
- First factor: something you know (such as your email address and password combination).
- Second factor: something you have (such as a recovery code).
In SchoolDay, you can set up MFA only in combination with your credentials (email and password) as first factor and recovery codes as second factor.
Requirements
- Account Admin permissions are required. To activate MFA for non-admin users, you should customize the Passport Login feature.
Enable MFA
SchoolDay requires enabling MFA for all Admin accounts. After setting the password and first time login, you will be directed to enable MFA for your account.
To turn on MFA for your account:
- Log in to SchoolDay.
- Go to the Connect > profile settings > My Profile.
- Go to the Security Settings.
- Select the Multi-factor authentication checkbox.
- Enter your phone number and click Save. You will receive a verification code on the provided phone number.
Note: Enter your phone number starting with "+" and without spaces, dashes, or parentheses.
Example: +17251213145. - Enter the verification code, and then click Verify.
- Download, print, or copy codes, and click Close.
Once activated, you will have to go through a 2-step login process each time. To deactivate this option, clear Multi-factor authentication checkbox.
Get recovery codes
You will receive ten recovery codes on the end of the MFA customizing which you can store in a safe place. Recovery codes enable you to access your SchoolDay profile if any other authentication method is not available. For example, if you lost access to your mobile device, you can use a recovery code to log in. Each recovery code can be used only once.
Important: Save your recovery codes in a secure, memorable place.
If you use a recovery code, MFA is disabled immediately. To keep your account safe, enable it again by adding an authenticator app or SMS verification to your profile. You will receive a new recovery code. If you use all your recovery codes, you can regenerate new ones.