Not logged in - Login
< back

Enabling Two Factor Authentication for Your Site

Contents [hide]

Setting up Two Factor Authentication for your site.

Site Administrators can set up Two Factor Authentication. This can be set up in advance to give users time to prepare for Two Factor Authentication.

To access Two Factor Authentication Management

Select the Preferences tool from the SIMS ID launch Pad.

If you only have access to one site, the following step is not necessary

Then choose the site you wish to manage from the list of sites presented. You can use the search tool and column ordering functions to assist your search

Now click on the "Two FactoreFactor Authentication" Button

The following screen displays. You are advised to read the guidance provided on this screen.

To enable Two Factor Authentication you should useruse the slider to enable Two Factor Authentication and enter an Effective Start Date.

What does the Effective Start Date do?

Prior to the Effective Start Date:

an end user who is allocated Two Factor Authentication will be prompted at their next login to set up a second authentication factor, either a Pass Phrase or an Authenticator App. For information on the supportsupported forms of second factor please see an introduction to two-factor authentication. Prior to the Effective Start Date, the end user may skip the set up of a second factor.

On or after the Effective Start Date :

An end user who is allocated Two Factor Authentication will be prompted at their next login to set up a second authentication factor, they will not be able to login until this is done.


Who should Two Factor Authentication be applied to.

WHenWhen you enable two factortwo-factor Authentication you will be presented with three options.

Option 1 - Mandatory (easy settings)

This option will force either Site Administrators, All Adult users or All users at your site to use Two Factor Authentication. If you want more granular control please use option 2.

Once you have set the option please click the Save your Changes button.

Option 2 - Mandatory Customised

This option allows the Site Administrator to choose which groups of users (grouped by User Type) will be forced to use Two Factor Authentication. The user picker will launch automatically. If you need to relaunch it, please use the "Choose Mandatory Users" Button. You are able to enable the manadatorymandatory use of Two Factor Authentication for Site Administrators.

Using the Group/user picker

Clicking the + adds this 'User Type' to the users required to use Two Factor Authentication. The group then disappears from the available list. If you want to add individual users, you can use the Filter in the top right-hand corner to hide 'User Types'. You can use the same filter to hide/show individuals. When you have selected the necessary User Types and/or users click OK to save or Close to abandon your changed On clicking OK a confirmation dialogue appears. Again, click OK to accept the changes or Cancel to abandon them.

Once you have set the option please click the Save your Changes button.

Option 3 - Optional

This option enables Two Factor Authentication at the site but does not mandate that user have to use it. Individuals are free to secure their account Two Factor Authentication. This is useful where you want to encourage use but not mandate it. You can prevent this setting being available to Students.

Once you have set the option please click the Save your Changes button.

Editing Two Factor Authentication Steps.

You can repeat the steps above to change who Two Factor Authentication is applied too.

Turning Two Factor Authentication off.

From the Two Factor Authentication section of Preferences (Setting-up-a-Passphrase) please remove the tick from Tick this checkbox to enable Two Fator Authentication. now click the Save your Changes button. Two factorTwo-factor authentication is now disabled for the site.

When you turn the Two Factor Authentication Service off this does not clear users Two Factor Authentication settings. If the service is re-enabled. Users will be able to user their previously set Two Factor Authentication Settings. This means you can turn the service off temporarily and not cause all your previoulsypreviously configured users to have to reset their details

You may also be interested in...

What happens when a user logs in after Two Factor Authentication has been enabled?

First login with Two Factor Authentication

Enable an additional Two Factor Authentication method.

Setting up a Two Factor Authentication Passphrase]

Set up an Additional Passphrase as a Two Factor Authentication Method

Setting up an Authenticator App.

Set up an Authenticator Application as a method of Two Factor Authentication

Managing my Personal Two Factor Authentication Settings

Managing Two Factor Authentication Settings

Resetting another users' Two Factor Authentication Settings

Sometimes it is necessary for a site Administrator to reset a user's Two Factor Authentication settings so they can reset them, this may be necessary if they have lost their mobile device. Instructions for a Site Administrator reset of a users Two Factor Authentication Setting