Two Factor Authentication – 2FA

Two Factor Authentication (2FA) is a security method in addition to a password. It helps secure your account by requesting a time limited code in as well as your username and password. The basic idea being that you enter something you know (your password) and something you have (your time limited code). For more general information about please see the below link:

https://www.twilio.com/docs/glossary/what-is-two-factor-authentication-2fa

Functionality #

Some functionality in the system involves bulk sensitive data, this functionality will be locked behind 2FA requirements and users that do not have this fully set up will not be able to use it. Currently, the functionality restricted is:

  • Emailing bulk contacts
  • Exporting bulk data
  • Exporting email address
  • Importing pupils

Setup #

To setup 2FA functionality for a user, go to Control Panel > Users. From here, click the 3 dot menu. The actual menu listing will vary depending on the user’s current 2FA settings.

  • If this has not been set up, there will be the option to Enable 2FA
  • If this has been enabled but the setup not completed, there will be the option to Disable 2FA
  • If this has been fully set up, there will be both the option to Disable 2FA, and Reset 2FA

Enabling and resetting 2FA essentially do the same thing – the next time the user logs in, they will be presented with a QR code to scan in their 2FA app, or a code to manually enter. If the user is logged in, they will need to log out and back in again to set it up.

Once the QR code has been scanned or the manual code entered, the app will give a 6-digit code. This is what needs to be entered into the system when prompted. If the code is entered within the 30-second window, this will complete the setup.

Status #

A user’s 2FA status is represented in the list of users. A green filled circle is fully set up, a yellow dotted circle has been enabled but not set up, a red lined circle has not been enabled.

Supported Apps #

The 2FA setup should be supported in all major 2FA authentication apps. This includes:

  • Authy
  • Google Authenticator
  • Microsoft Authenticator