Multi-Factor Authentication is a key tool in helping to prevent unauthorised access to your account. If you try to log on from outside of school you will be prompted for additional authentication besides just your password. When you are on site connected to the school network you will not be prompted.


This is a very important step in securing our systems and data - you will no doubt have seen all the various companies, universities and schools in the news suffering from ransomware attacks - these usually begin by attackers producing fake login screens, emailing links to people who are then tricked into entering their username and password. The attackers then use these details to access accounts and systems and launch their attack. If MFA is set up this becomes a lot more difficult for an attacker to achieve without physically being on site or physically having a staff member's device.


Your device will require at a minimum a passcode (Touch ID is also supported) in order to use Authenticator - if you do not have these set up then not only is your device unencrypted and your data easily accessible to anybody who finds your device if lost, but it is also not compliant with United Learning policy if you are using it to access any school data.


  1.  Go to https://aka.ms/mfasetup on a school computer and log in with your school email address and password.

  2. When you see the More information required screen, click Next
    If you don't see this screen then it's likely your account is already set up with an alternative method. Click on Add method, then Authenticator app, to continue.
  3. Open the Microsoft Authenticator app on your mobile device, or install it from the App Store or Google Store if it isn't already installed. Once you've done this. click on Next to set up Authenticator (recommended). Alternatively you can click I want to set up a different method to set up phone call or text (SMS) verification however we strongly recommend using Authenticator (as you should already have this installed for logging in to iSAMS from home) but the other options are available if you don't have a device capable of running Authenticator.
  4. On your mobile device, open Authenticator and press on the + icon at the top right to add an account. Select Work or school account. On the computer, click Next.
    PCPhone
  5. On your mobile device select Scan QR code, if prompted allow Authenticator access to your device's camera, then position the QR code off the computer screen into the box on the Authenticator app. Click on Next as soon as you have scanned the code. If you don't want to use the QR code you can instead select Sign in on Authenticator and provide your username and password.
  6. You should then be taken back to the Authenticator app main screen where it should display your school account. Click Next on the computer. You should now get a notification on your mobile device to approve the login - press Approve. If you have touch ID enabled you'll need to confirm this with your thumb print.
    PCPhone


When you log in to your account from outside school you may be prompted to approve the login via Authenticator. Usually you can get your computer to remember you for 30 days so you won't have to do this every time you log in. You only need to go through the above setup instructions once whilst physically on site.


If you have multiple phones you can go through the process again to add Authenticator to multiple devices - just go back to https://aka.ms/mfasetup and when shown your list of authentication methods, click Add method, then pick Authenticator app.