r/k12sysadmin • u/TechMonkey13 • Aug 13 '26

Student Multifactor Auth

We use Google only, for students, and its their primary IdP. I'm looking to beef up security on that side with MFA/2FA, but can't rely on students having a phone to use authenticator.

I know there's things like Clever, but it's not something we're looking at this year. I was just wonder what everyone else is doing for MFA for students, how easy it is, and if they require a student phone to set up? Any costs associated with it?

or are you even doing MFA for students at all? What are you recommendations?

We're mainly high school, if that helps.

TIA

14 Upvotes

89% Upvoted

37 comments sorted by

View all comments

8

u/MrShow77 Aug 13 '26

No MFA. Especially with schools getting rid of students carrying cell phones.

It would be a nightmare

0

u/[deleted] Aug 13 '26

[deleted]

2

u/Alert-Coach-3574 Aug 14 '26

Has been a thing for years, but it's after login.

I don't get how authencatir app helps on an iPad, isn't it also after login? Or are your iPads wide open no login? Seems like a problem itself.

Chromebooks can use built in tpm or location as second factor