Jefferson County Public Schools
Multi-Factor Authentication (MFA)
General F.A.Q.
Q: Why is JCPS using MFA?
A: JCPS is working to provide the most secure online network possible to protect your information and the information of our students. To do this, we have to take additional proactive steps.
Q: What verification options do we have?
A: Mobile Notification (Microsoft Authenicator App), Verification Code (Microsoft Authenicator App), Text Message and Phone call.
Mobile Notification - A push notification is sent to the authenticator app on your smartphone asking you to authenticate your log in.
Verification Code - The Mobile Microsoft Authenticator app will generate a verification code that updates every 30 seconds. You will be asked to enter the most current verification code in the sign-in screen.
Text Message - A text message with a 6-digit code is sent to your mobile device that you will input to complete the authentication process.
Phone Call - A call is placed to your mobile phone asking you to verify you are signing in. Press the # key to complete the authentication process.
Q: How often do I have to provide a second factor (use my phone) to log in?
A: The short answer is anytime that you type in your password, you may have to use a second factor. Employees should expect to authenticate at least once a day. Most applications will “transfer” your info as long as you are on the same device and network, and you won’t likely be asked to sign in again. However, if you change networks (for example, leaving JCPS to go home), you may be prompted to sign in and verify with MFA again.
Q: Will I have to use MFA when I log into the health screener, email, Google or Infinite Campus when I'm at school?
A: Yes, employees should expect to authenticate at least once a day. Most applications will “transfer” your info as long as you are on the same device and network, so you won’t likely be asked to sign in again. However, if you change networks (for example, leaving JCPS to go home), you may be prompted to sign in and verify with MFA again.
Q: I want to set my Office phone as my additional security option. Can I do this?
A: The ideal situation would be the use of a personal device for MFA use. Please do not use the main School line or Department as one of your security options, because that call will go to a call queue group. You can use a desk phone if it can be dialed from outside the school or central office. If you have a RingCentral number, you may use that as an option.
Please note - if you use an office phone and are away from the building, you will not be able to authenticate since you will not have access to that phone.
Q: I don't have a phone or don't want to use my personal device. So what do I do?
A: If you have a RingCentral number, you can use it, or you can use a desk phone if it can be dialed from outside the school.
Q: What if I left my phone at home?
A: If you are getting prompted for MFA and you do not have access to your mobile phone, please contact the Customer Care Center at 502-485-3552 and we can assist you with a one-time, temporary passcode to access your account. This will be a random generated passcode and it will only work for a period of time.
Q: What if I lose my phone or change my phone number?
A: You are encouraged to set up a secondary phone number. To do so, you can update your security information options at any time by visiting https://aka.ms/mfasetup. If you need additional support, please contact the IT3 CARE Center at 502-485-3552 or visit jcps.me/help.
Q: What if I cannot get a signal on my phone?
A: Use the MS Authenticator app; it will show a 6-digit code or a push notification is sent to your smartphone asking you to Authenticate your log in. Both options will work even when your phone is not connected to the Internet
Q: I check my email on my iPhone or Android phone using the native email app. Will this app work with MFA?
A: If you have the latest version of iOS or Android, then you won't have any problem. The newest versions support MFA.
If you don't have the latest version, then you may need to use the Microsoft Outlook app.
Q: I would like to change the number that is called when I get an MFA challenge. How do I do this?
A: All options related to your MFA options are accessible from https://aka.ms/mfasetup.
Q: I am a delegate for another user's mailbox; how will this work if MFA is turned on for both of us?
A: If you are truly a delegate for another user's mailbox, you shouldn't have any issues related to MFA. If you have added this user's mailbox to your Outlook and you have to enter their password to view their mail, then you are not actually set up as a delegate; you are simply logging into their email. If the latter is the case, you will need to be set up as a delegate; This is done from within the mailbox of the other user's Outlook. Click HERE for more detailed instructions.