Multi-Factor Authentication (MFA) - Configuration

Perform the following steps to configure MFA:

• Generate an MFA Key for the District

• Enable MFA for a Profile

• Test the Setup

Generate an MFA Key for the District

Generate an MFA key before enabling MFA at the profile level.

1. Click the circle with your initials in the toolbar. Select Environment Maintenance.

2. In the Business Entities section, select an entity.

3. Select Generate Key. If a key has already been generated, the button label reads Update Key.

4. Select Save.

Cloud-Hosted customers must contact PowerSchool Support to complete this step.

Enable MFA for a Profile

After the MFA key is generated, you can enable MFA for individual profiles.

1. In the Business Entities section, select an entity.

2. In the Profile Information section, select the profile you want to secure.

3. Select the modules for which to enable MFA:

   • Enable MFA for PowerSchool ERP

   • Enable MFA for Employee Access Center

   • Enable MFA for Employee Timesheet

   • Enable MFA for Vendor Punchout

4. Enter a value in the MFA Expiration (in minutes) field. The allowed range is 5 to 10 minutes. This is how long the emailed code will remain valid after it is sent.

5. Select Save.

Users assigned to this profile will now be prompted for a verification code at each sign-in.

Cloud-Hosted customers must contact PowerSchool Support to complete this step.

Test the Setup

After enabling MFA, test the setup before roll-out.

1. Sign in as a user assigned to the MFA-enabled profile.

2. Confirm that a verification code email is delivered to the user's email ID.

3. Enter the code before it expires.

4. Confirm the user is granted access.

If the user does not receive the email, refer to MFA code email not received and troubleshoot the issue.