Topic outline

  • MFA in Saanich Schools

    Collapse all Expand all

    Follow this guide to enroll in and configure Multifactor Authentication (MFA)

    What is Multifactor Authentication (MFA)?

    Multifactor Authentication (MFA) adds a layer of protection to the sign-in process. It involves adding an additional "factor" to the login process: in this case, the Microsoft Authenticator app on your phone "proves" that you are a legitimate user. This protects your account to prevent threat-actors from using stolen credentials to access your account. We strongly recommend turning on MFA for both your Saanich Schools account, and any other personal accounts you have (personal email, banking, online shopping, etc.) to protect yourself further.

    How it Works for Saanich Schools

    We've configured our MFA solution with these options:

    • While connected to a Saanich Schools network (ex; connected to school or board office wifi), MFA is skipped in the sign-on process.
    • While not connected to a Saanich Schools network (ex; at home or on mobile hotspot), MFA is required in the sign-on process.

    Microsoft Authenticator App and YOU

    Our MFA solution is the "Microsoft Authenticator" app, which can be installed on a personal or work Android or Apple phone. Every time your account requires MFA, the Microsoft Authenticator app will send you a notification. You can then tap the notification and submit the authentication code.

    1. Privacy and Personal Information

      • Using the Microsoft Authenticator app on your personal phone does not give your employer access to any personal data stored on your device.
      • The app itself does not transmit your private information such as messages, photos, or app data to your organization.
      • Your employer may see sign-in activity related to your work account, such as time and location of sign-ins, device used, and whether access was granted or denied. This is standard for enterprise security and does not include personal content.

    2. Install the Microsoft Authenticator app on your phone.

    MFA Video Guide and Explanation

    1. Setup MFA through your Saanich Schools account and the Microsoft Authenticator app

      1. Make sure you are connected to the internet outside of the Saanich Schools network.
      2. If you are already being prompted to Set Up MFA, skip this step:  If you are logged in, log out of your Saanich Schools Microsoft email or Microsoft 365 account.
        1. Open https://mail.saanichschools.ca
        2. Click your name icon in the upper right.
        3. Click "Sign out".
      3. Log back in to your Saanich Schools Microsoft email or Microsoft 365 account.
        1. Open https://mail.saanichschools.ca
        2. Start the login process with your Saanich Schools email account.
      4. The sign in process will prompt you to set up MFA.
        1. Follow the MFA onboarding instructions, and click "Next" until you see a QR code.
        2. If the sign in process does not prompt you to set up MFA, make sure you're connected to a non-Saanich Schools network then try again in a few minutes.
      5. Open the Microsoft Authenticator app on your phone.
        1. Set up your account, selecting "Scan a QR code".  If you already use the Authenticator app, you may need to tap the + button and create a new Work or school account before selecting "Scan a QR code."
        2. Scan the QR code with your phone.
        3. Allow notifications from the Microsoft Authenticator app when prompted.
        4. Once you've scanned the QR code and successfully added your account in the Microsoft Authenticator app, click "Next".
        5. Microsoft should then show you a 2-digit code on your computer screen. Follow the instructions and enter the code in your phone.
        6. Click "Next", then "Done" to sign in to your Saanich Schools account.

    2. Now you're ready to receive multifactor authentication codes

      1. Each time you log in to your Saanich Schools account while not connected to a Saanich Schools network, Microsoft will prompt you to enter the code sent to the Microsoft Authenticator app.
      2. Verify that the "location" information it shows you is generally accurate and enter the code.
      3. Congratulations! You are signed in securely.

    Notes:

    • Allow notifications from the Microsoft Authenticator app when prompted.
    • During the MFA setup in the Microsoft Authenticator app, please do not select "I want to set up a different method". The Microsoft Authenticator app is more secure and faster than alternative options.

    More Information: