Two-factor authentication adds an extra layer of security for your MIS designed to ensure that your staff are the only people who can access their accounts using a code generated on their phone, even if someone else knows their Arbor password. See this article for how they can do this. If you have single sign-on enabled, your staff can still log into the MIS in the standard way (using their email address and password) if they prefer. This adds an extra layer of security when logging in, which means that even if someone else knows a staff member’s Google email address and password, they won’t be able to log in without the generated authenticator app code (see the section below). We strongly recommend using two-factor authentication with single sign-on. You might be able to get Azure AD for free if you will only be using it for SSO, you can see more details about this here. You must have staff accounts in an Azure Active Directory (AD) tenant to be able to use this feature. Microsoft SSO is a secure authentication system that is free to use and makes logging in easier for your staff because they can sign into Arbor using their Microsoft account. You'll need the User Details: Manage All Users permission to set this up on the MAT MIS - if you don't have the permission, someone will need to assign you a new Business Role that contains this permission.You'll need either the Staff: User Details: Administer or School: General Admin: Administer permissions to set this up on the School MIS - if you don't have the permission, you'll need to ask your admin team to give you permission using these instructions.Switch on Two-factor authentication - 2 minutes.Completing the checklist to prepare - varies depending on the actions needed, can take time to update staff email addresses.
0 kommentar(er)
