Multifactor Authentication

From Studentnet Wiki
Revision as of 14:41, 26 July 2019 by Dlim (talk | contribs)
Jump to navigation Jump to search

Multifactor Authentication (MFA)

The purpose of using MFA, is it adds another method of verification, increasing security. It sends a code via SMS for the user to input as well as their username and password.

1) Activating MFA

  1. Login to dashboard
  2. Navigate to Users
  3. Either select a user or create a new user
  4. Navigate to Recovery Details and click Edit
  5. Add a valid phone number into Recovery Phone field
  6. Click submit
  7. Navigate to Security and click Turn On
  8. Click yes,enable Multifactor

1.1) Notes

  • To be done as an adminstrator


2) Set MFA with an Authenticator App

By using an Authenticator App instead on SMS will allow users to login if there is no reception for their phone to retrieve code via SMS

  1. Go to your school's Cloudwork.ID
  2. Navigate to top right of the site where your name is
  3. Click Settings
  4. In Mulftifactor Authentication click Add Authenticator App
  5. Using Google Authenticator click on the bottom right, the plus sign
  6. Click scan barcode
  7. Point the camera to the barcode so the red lines line up with the barcode on your school's Cloudwork.ID
  8. Input code that is shown on Google Authenticator, to your school's Cloudwork.ID

2.1)Notes

  • To be done as an individual user
  • Users do not need to use Google Authenticator App, there are other apps such as Microsoft Authenticator and Authy 2-Factor Authentication


3) Enabling MFA Whitelist

Using MFA Whitelist for your school's Ip address range will allow users logging in, inside the school to not have to go through MFA. But logging in outside school will have user go through MFA

  1. Login into your school's dashboard
  2. Navigate to Cloudwork.ID settings
  3. Navigate to Features and click Edit
  4. Navigate to Multifactor Authentication Whitelist
  5. Enter into the field your school's Ip address or Ip address range

3.1) Notes

  • To be done as an administrator