Multi-factor Authentication with Rapid Identity and How It Works

 

 

 

 

 

What is Multi-factor Authentication (MFA)?

 

When you access accounts online you are likely used to logging in with a username and password which is a single factor for authenticating to a system. At Skokie School District 73.5, we employ the use of MFA in Rapid Identity to help protect your account from unauthorized access or breach of sensitive information.

 

Passwords, no matter how complex, are not failsafe and in the world of cybersecurity it is an expectation that passwords will be leaked. MFA helps reduce the impact of this by adding an additional layer of authentication that cannot be easily circumvented.

 

MFA is able to prohibit unauthorized access by combining something you know (like a password) with something you have (like a trusted device such as a smart phone).

 

We strive to provide a balance between ease of use and security with our MFA offerings so below you will see our available methods and how they work.

 

 

SMS Passcode (Text Message) - (Most Secure)

 

What: This method sends a temporary one-time passcode (TOTP) (usually a six-digit number) to an SMS enabled phone number.

How: Learn how to setup SMS Passcode as your default MFA option. ARTICLE COMING SOON!

Note: Be aware that if you use a soft phone app or a synchronized messaging service like Apple iMessage, you will want to ensure you have secure access configured anywhere that soft phone app or message service syncs.

 

SMS Example Below

 

 

 

RapidID PingMe Method - (More Secure)

 

What: This method uses the RapidIdentity app for smart phones available at Google Play or the Apple AppStore.

How: See this article to learn how to setup PingMe as your default MFA option. ARTICLE COMING SOON!

 

PingMe Example Below

 

 

TOTP Authenticator App Method - (More secure with added convenience)

 

What: This method requires the setup of an app like Google Authenticator (Google Play or Apple AppStore) or the Rapid Identity app (Google Play or the Apple AppStore) to generate a temporary one-time password (TOTP, similar to the SMS passcode) that is used in addition to your password.

How: See this article to learn how to setup TOTP Authenticator App as your default MFA option. ARTICLE COMING SOON!

Note: This method does allow you to remember trusted devices for a specified number of days at which point you will be prompted for MFA again. We do not recommend using this feature on shared devices, devices that can be easily accessed by other individuals or if you have access to highly sensitive information.

 

TOTP Examples Below

RapidID App TOTP		Google Authenticator TOTP

 

 

Alternate Email Method (Less Secure)

What: This method is similar to SMS and TOTP apps but utilizes an email, other than your work email, to send a temporary one-time passcode for MFA. 

How: See this article to learn how to setup Alternate Email as your default MFA option.

Note: This method breaks the convention of something you have but is still more secure than single factor authentication.

 

Alternate Email Example Below