Multi-factor authentication provides an additional layer of security for users by requiring them to use a second device with an authentication app to log into their account. Administrators have various options for enforcing multi-factor authentication.
To set it up, users must download an authentication app like Google Authenticator or Microsoft Authenticator to a phone or tablet as their second device.
Once it's set up, users are required to use that device to sign into their accounts going forward. Users can choose to skip multi-factor authentication for one-month periods with a Remember this device option. Users can also configure external password managers that can autofill MFA codes.
MFA Limitations with Pearson Connexus API or FTP:
- Accounts using the Pearson Connexus API through custom tools or automations should not configure or require MFA. MFA is supported only for accounts using the API console.
- MFA is not supported with FTP. If you want to use MFA for your main account, create a separate user account for FTP. This account should use a strong password and have limited access.
If you have questions, contact your District Success Partner.
By default, Administrators, Teachers, and Observers can choose to set up MFA to protect their account. In order for Students to set up MFA, the administrator in the domain must first allow it.
Allow Students to Set Up Multi-factor Authentication
To allow your users to set up multi-factor authentication:
- In the Domain tool, open Domain settings.
- Under Student Options, check the Allow students to set up multi-factor authentication.
Note: MFA can be used with Single Sign-on (SSO). - Save.
The option to set up multi-factor authentication now appears in the User menu.
In your Password policies, you can also configure Enforcement actions that Pearson Connexus will take if users haven't set up multi-factor authentication