What is Multi-Factor Authentication (MFA)?

Multi-factor authentication is an electronic authentication method in which a user is granted access to a website or application only after successfully presenting two or more pieces of evidence to an authentication mechanism: knowledge, possession, and inherence. (Wikipedia) Click here for an RTM video description.

Why is RTM doing this?

Cyber-Insurance companies (Who knew we had a cyber insurance company?) are requiring all Pennsylvania school districts to enact MFA by July 1st of this year. All teachers who have access to TAC, and other student data systems, will need to turn this feature on.

How does it work?

Multi-factor authentication is when a user must provide two or more pieces of evidence to verify their identity to gain access to an app or digital resource. Multi-factor authentication (MFA) is used to protect against hackers by ensuring that digital users are who they say they are. Staff will download an app on their phone that will act as verification when an account is logged into.

What are the methods that can be used for MFA?

To set up MFA, you will need a secondary device, such as a cell phone, office phone or tablet, to authenticate. While the Technology Department is recommending that faculty and staff use the Authenicator App to manage this process, you have several options for authentication. You can receive an authentication code through text messages or phone calls. In the set-up directions, you will choose a method (app notifications, texts, or calls) at Step 7.

When should I set MFA up?

RTM Multi-factor authentication will start on May 17th. Please complete the steps below prior to the 17th.

When will I encounter MFA?

You will be required to "authorize" your account whenever you sign in to your computer, Google, Chrome, etc. When you log into an account that requires MFA you will be prompted with a Microsoft popup. This prompt will instruct you to go to your cell phone to follow the directions in the Microsoft Authenticator App. This is the same experience as when banking electronically or verifying a personal email.