Multifactor Authentication

Multifactor Authentication (MFA)

The purpose of using MFA, is it adds another method of verification, increasing security. It sends a code via SMS for the user to input as well as their username and password.

Activating MFA

1. Login to dashboard
2. Navigate to Users
3. Either select a user or create a new user
4. Navigate to Recovery Details and click Edit
5. Add a valid phone number into Recovery Phone field
6. Click submit
7. Navigate to Security and click Turn On
8. Click yes,enable Multifactor

Notes

• To be done as an adminstrator

Set MFA with an Authenticator App

By using an Authenticator App instead on SMS will allow users to login if there is no reception for their phone to retrieve code via SMS

1. Go to your school's Cloudwork.ID
2. Navigate to top right of the site where your name is
3. Click Settings
4. In Mulftifactor Authentication click Add Authenticator App
5. Using Google Authenticator click on the bottom right, the plus sign
6. Click scan barcode
7. Point the camera to the barcode so the red lines line up with the barcode on your school's Cloudwork.ID
8. Input code that is shown on Google Authenticator, to your school's Cloudwork.ID

Notes

• To be done as an individual user
• Users do not need to use Google Authenticator App, there are other apps such as Microsoft Authenticator and Authy 2-Factor Authentication

Enabling MFA Whitelist

Using MFA Whitelist for your school's Ip address range will allow users logging in, inside the school to not have to go through MFA. But logging in outside school will have user go through MFA

1. Login into your school's dashboard
2. Navigate to Cloudwork.ID settings
3. Navigate to Features and click Edit
4. Navigate to Multifactor Authentication Whitelist
5. Enter into the field your school's Ip address or Ip address range

Notes

• To be done as an administrator

Trusted device

As a feature of Multifactor, Users have the option when logging in to select I trust this device, don't ask again. This means for the next 30 days the user will not have to use a code for MFA.

Disabling Trust Device

This feature can disable any user from having the option to trust a device.

1. Login into your school's dashboard
2. Navigate to Cloudwork.ID settings
3. Navigate to Features and click Edit
4. Navigate to Enable Trusted Devices
5. Select the option Do not let users trust device

Notes

To be done as an administrator