Two-Factor Authentication (2FA) adds extra security to user accounts. After entering their password, users will be prompted to enter a unique code sent via email or SMS. Only the Superuser can set up and enforce 2FA settings for the school.

My School > System > General > General: Security

What are the 2FA configuration options?

• Allow users to enable 2FA: Users can activate 2FA themselves on their staff record at My Home > My Information: My User Information.

• Allow users to use trusted devices: Users can mark their laptop, desktop or mobile phone as a trusted device for three months. Trusted devices bypass 2FA at login. After three months the device must be marked again.

• Allowable 2FA verification methods: Select whether the code is sent via email or SMS. Note: the school is charged for SMS notifications.

• Enforce 2FA on all accounts: 2FA is activated on all staff records and staff cannot disable it themselves.

• Allow users without contact information to log in: If a user has no contact details, this option can allow them to add their information during login. The details entered are stored on their personal staff record in d6+.

Frequently asked questions

Who can set up 2FA settings?

Only the Superuser can set up 2FA for the school. Individual users can activate 2FA on their own profile if the Superuser has enabled the self-service option.

Will the school be charged for SMS verification attempts?

Yes. When SMS is selected as the 2FA verification method, the school is charged for every SMS notification sent to users.

How long does a trusted device remain active?

Three months. After this period the device must be marked as a trusted device again at the next login.