Set up MFA for your Admin account

In this article

Requirements

Enable MFA

Update phone number used for SMS MFA

Sign in using SMS MFA (default)

Set up MFA with Authenticator App

Sign in using Authenticator App MFA

Get recovery codes

To improve security for your admin account, set up Multi-factor authentication (MFA). MFA provides you with a more secure login process. It grants additional security if anyone other than you attempts to log in to your SchoolDay profile using your account.

To activate MFA for non-admin users, enable Passport Login. 

Requirements

• Primary Admin permissions.
• Installing Google Authenticator, Microsoft Authenticator, Authy, etc., on a smartphone to use the Authenticator App MFA.

Available MFA factors

SchoolDay supports multiple authentication factors to help secure user accounts. You can enable one or more factors, depending on the level of protection needed.

• SMS Mobile phone: Requires a mobile phone or email. Users receive a one-time code and enter it with their password.
• Authenticator App (TOTP): Optional secondary factor. Requires a compatible app. Users enter the temporary code generated by the app along with their password.

Enable MFA

MFA is mandatory and enabled by default for all admin users. It combines the required SMS factor with an additional factor. When activated, you will have to go through a 2-step login process each time.

Update phone number used for SMS MFA

If you change your phone number, you need to update the number used for SMS authentication. This ensures you continue to receive one-time verification codes required for login. Since SMS is a required authentication factor, you cannot sign in if the registered number is no longer active.

1. Go to the Connect > profile settings  > My Profile.
   
   
2. In the SMS section, click Edit.
3. Enter your phone number and click Continue.  You will receive a verification code on the provided phone number.
4. Enter the verification code, and then click Verify.

Sign in using SMS MFA (default)

1. Go to https://sso.gg4l.com, select your organization, and enter your username and password, then click Sign In. 
2. (If first-time sign in) When prompted for MFA, enter phone number used for MFA.
3. Enter the verification code, and then click Verify.
4. (If first-time sign-in) Copy recovery codes and save them in a secure location.

Set up MFA with Authenticator App 

To configure an authenticator app from your account settings:

1. Go to the Connect > profile settings  > My Profile.
   
2. Turn on Authenticator App toggle.
3. Scan the QR code displayed in your authentication app. Then, enter the code from the app for verification and click Verify.
4. Copy recovery codes and save them in a secure location.

To set up an authenticator app during sign-in:

1. Go to https://sso.gg4l.com, select your organization, enter your username and password, and then click Sign In. 
2. When prompted to enter phone number, click Set up Authenticator App. 
3. Scan the QR code displayed in your authentication app. Then, enter the code from the app for verification and click Verify.
4. Copy recovery codes and save them in a secure location.

Sign in using Authenticator App MFA

1. Go to https://sso.gg4l.com, select your organization, and enter your username and password, and then click Sign In. 
2. Enter the code from the app for verification and click Confirm.

Get recovery codes

If you lose access to your account, you can recover it using one-time recovery codes (for example, if you lost access to your mobile device). 

1. Go to the Connect > My Profile.
2. Click Regenerate Recovery Codes.
3. Copy recovery codes and save them in a secure location.

If you sign in using a recovery code, MFA is disabled immediately for your account. You’ll need to reconfigure your MFA factors the next time you sign in