How to Setup MFA in a Few Short Minutes

What is MFA?

MFA, or Multi-Factor Authentication is a combination of "Something you know, and something you have" to ensure even if your password is compromised, the thief can't still impersonate you, unless they can meet both criteria of the "Something you know, and something you have". As we all know, password compromise is one of the most common ways information is stolen from an organization.

In fact, you are probably already using MFA in one of its many forms if you are banking with one of the country's major banks, or accessing other personally sensitive information. Receiving a text to enter a code before completing a login is a (less than ideal) form of MFA.

Why MFA?

To ensure our students personal information, marks and other sensitive data is as best protected as possible, MFA is required when accessing PowerSchool SIS.

What do I need to set up MFA?

To complete MFA setup in a way that requires the least long term effort on your part (no codes to type in, just tap a prompt on your device), you will need access to a computer with Internet, and a reasonably current smart phone (newer than the last 4-5 years depending on the manufacturer) with at least WiFi connectivity.

I'm ready to set up MFA, what do I do?

Option 1:

Please watch this short instructional video and follow along using your computer and smart phone:

Evergreen MFA Setup.mp4

Option 2:

Follow the step by step guide outlined below:

1. On a computer of your choosing, go to https://aka.ms/mfasetup
2. Log in with either your Evergreen credential (preferred) or a Microsoft credential (if you are using iPhone and want to sync your passwords between your computers, phone and Microsoft Edge -- this is not required for Android devices).
3. If you have previously done some work setting up MFA, you'll need to authorize yourself following the prompts. If not, you should be brought directly to a page that looks like this (without any methods listed):
   
4. No matter if your methods are blank, or you have previously added a phone/SMS option, click Add method
5. For the question Which method would you like to add?, choose Authenticator App.
6. Once you've chosen this, the next screen prompts you to download the Microsoft Authenticator app. Clicking the link will take you to a page that has QR codes to the installer on either Google Play or the Apple App Store. Scan the appropriate one from your phone, and install the app.
7. Once you've completed the installation, open the app on your phone, and then click Next on the setup page on your computer.
8. If prompted on your phone, allow notifications. Then add an account, and select Work or school. (These same instructions are on the next setup page on your computer).
9. Once you've done that step on your phone, click Next on your computer, and a QR code will be presented for you to scan from within the phone app. On your phone, scan from within the app (choosing the Scan QR option) to connect the Authenticator to your account.
10. Once you've scanned in the QR code, the account should appear in your list on your phone. Click Next on the computer.
11. The system will send you a prompt on your phone to make sure everything is working correctly. Once you've authorized the prompt, you'll receive a success message and Microsoft Authenticator will be added to your sign-in methods.
12. If this is your first time setting up, it will be automatically be the default, and you don't need to go any further. If you are adding this method after having previously set up a different method, then at the top of the Security info mage, click on the highlighted Change:
    
13. In the Change default method screen, choose Microsoft Authenticator - notification
14. Confirm your changes. You have completed setup.