What is Passport Login

In this article

What it is

What it does

Why use it

Supported authentication factors

How Passport Login differs from admin MFA

Next steps

What it is

Passport Login is the SchoolDay feature that provides multifactor authentication (MFA) for teachers and students. Users must verify their identity with two authentication factors before they can access SchoolDay. This verification occurs after they sign in through a third party identity provider, such as Google or Microsoft.

What it does

Without Passport Login, teachers and students rely only on credentials from their identity provider (IdP). Passport Login adds a required second verification step, such as scanning a physical ID card or using Face ID. This step helps prevent unauthorized access if a user’s IdP credentials are compromised.

Why use it

Passport Login is the primary tool for securing non-admin user access across an organization. It supports grade-based customization for students, so younger students can use simpler factors (such as Face ID) while older students use stronger methods (such as Active Directory and QR codes). A configurable Grace Period allows time-limited exceptions without fully disabling MFA.

Supported authentication factors

Note: Third-party identity providers such as Google or Microsoft 365 cannot be selected as MFA factors within Passport Login.

How Passport Login differs from admin MFA

Passport Login applies only to teachers and students. Admin accounts use a separate, always-on MFA system based on SMS and an optional Authenticator App. The two systems are independent. They use different factors, are configured in different places, and do not affect each other. An admin enabling Passport Login for their district does not change how the admin themselves signs in.

Key differences are following:

Next steps

• Enable Passport Login for your organization
• Configure MFA methods for users
• Set up Face ID (MFA)
• Set up Google as MFA in Passport Login