Multi-factor authentication provides an additional layer of security for users by requiring them to use a second device with an authentication app to log into their account. Administrators have various options for enforcing multi-factor authentication.
To set it up, users must download an authentication app like Google Authenticator or Microsoft Authenticator to a phone or tablet as their second device.
Once it's set up, users are required to use that device to sign into their accounts going forward. Users can choose to skip multi-factor authentication for one-month periods with a Remember this device option. Users can also configure external password managers that can autofill MFA codes.
MFA Limitations with Pearson Connexus API or FTP:
- Accounts using the Pearson Connexus API through custom tools or automations should not configure or require MFA. MFA is supported only for accounts using the API console.
- MFA is not supported with FTP. If you want to use MFA for your main account, create a separate user account for FTP. This account should use a strong password and have limited access.
If you have questions, contact your District Success Partner.
Allow and Enforce Multi-factor Authentication
To allow your users to set up multi-factor authentication:
- In the Domain tool, open Domain settings.
- In the Authentication-password policy card, check the Allow users to set up multi-factor authentication option.
- In the Enforcement field, you can select the action you want Pearson Connexus to take if users haven't set up multi-factor authentication:
- None
- Recommend on login
- Require on login
- Save.
The option to set up multi-factor authentication now appears in the User menu.
Multi-factor Authentication Enforcement
Prepare users before requiring multi-factor authentication.
When multi-factor authentication is required, users must set it up to sign in.
To prevent access issues:
- Provide advance notice with setup instructions and the enforcement date.
- Enable it early, allowing users to set it up before the enforcement date.
