Multi-Factor Authentication (MFA)

Multi-Factor Authentication (MFA) adds an extra step to the sign-in process. After entering their password, users receive a one-time verification code via email and must enter it to access the system.

This section covers the requirements to get MFA working in your district.

Why Enable MFA?

A password alone is no longer enough to protect sensitive accounts. MFA helps prevent unauthorized access even if a password is compromised, and it adds a meaningful layer of protection for your district's financial and employee data.

MFA vs Single Sign-On (SSO)

PowerSchool ERP supports both MFA and Single Sign-On (SSO), but only one method should be active for any given module or profile at a time. Running both on the same login path will cause sign-in conflicts.

You can use different methods in different places, for example, MFA on one module and SSO on another. Ensure that each module or profile is configured for only one method.

To switch from SSO to MFA, disable SSO for that module or profile before enabling MFA.

Supported Modules

MFA is supported for the following modules in the supported PowerSchool ERP versions:

The following sections cover the process of configuring MFA: