{"id":3630,"date":"2024-05-29T09:00:22","date_gmt":"2024-05-29T09:00:22","guid":{"rendered":"https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/?post_type=ht_kb&#038;p=3630"},"modified":"2026-10-23T18:13:55","modified_gmt":"2026-10-23T18:13:55","slug":"mfa-support","status":"publish","type":"ht_kb","link":"https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/knowledge-base\/mfa-support\/","title":{"rendered":"Multi-Factor Authentication (MFA) Support"},"content":{"rendered":"\n<div class=\"wp-block-ht-block-toc  is-style-outline htoc htoc--position-wide toc-list-style-plain\" data-htoc-state=\"expanded\" data-htoc-scrollspy=\"false\" data-htoc-auto-collapse=\"false\" data-htoc-mapping-headers=\"[false,true,true,true,true,true]\"><span class=\"htoc__title\"><span class=\"ht_toc_title\">Table of Contents<\/span><span class=\"htoc__toggle\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"16\" height=\"16\"><g fill=\"#444\"><path d=\"M15 7H1c-.6 0-1 .4-1 1s.4 1 1 1h14c.6 0 1-.4 1-1s-.4-1-1-1z\"><\/path><path d=\"M15 1H1c-.6 0-1 .4-1 1s.4 1 1 1h14c.6 0 1-.4 1-1s-.4-1-1-1zM15 13H1c-.6 0-1 .4-1 1s.4 1 1 1h14c.6 0 1-.4 1-1s-.4-1-1-1z\"><\/path><\/g><\/svg><\/span><\/span><div class=\"htoc__itemswrap\"><ul class=\"ht_toc_list\"><li class=\"\"><a href=\"#htoc-setting-up-mfa-to-log-in-to-your-clearinghouse-secure-site-account\">Setting Up MFA to Log in to Your Clearinghouse Secure Site Account<\/a><\/li><li class=\"\"><a href=\"#htoc-mfa-faqs\">MFA FAQs<\/a><\/li><\/ul><\/div><\/div>\n\n\n\n<p class=\"wp-block-hb-message is-style-important wp-block-paragraph\"><strong class=\"message-label\">Important:<\/strong> <strong>This information does not apply to API or FTP connections.<\/strong> APIs do not require MFA. If you wish to enable MFA for FTP connections, users can enable MFA after logging on to the FTP portal (see <a href=\"https:\/\/help.studentclearinghouse.org\/dataexchange\/knowledge-base\/logging-on-to-your-account\/\">Logging On To Your Account<\/a> on the Secure FTP knowledge base).<\/p>\n\n\n\n<h3 id=\"htoc-setting-up-mfa-to-log-in-to-your-clearinghouse-secure-site-account\" class=\"wp-block-heading\">Setting Up MFA to Log in to Your Clearinghouse Secure Site Account<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">1. Once multi-factor authentication (MFA) has been enabled, you will be prompted to set up multi-factor authentication upon login to the National Student Clearinghouse <a href=\"https:\/\/secure.studentclearinghouse.org\/acc\/servicedispatcher\">secure site<\/a>. You must set up at least one MFA option to complete account setup and access Clearinghouse services. To learn more, <a href=\"#mfafaq\">read the <strong>MFA FAQs<\/strong><\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The available MFA options include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li id=\"htoc-google-authenticator-most-secure-option\">Google Authenticator&nbsp;(most secure option)<\/li>\n\n\n\n<li id=\"htoc-sms-authentication-secure-but-not-as-safe-as-the-google-authenticator\">SMS Authentication&nbsp;(secure but not as safe as the Google Authenticator)<\/li>\n\n\n\n<li id=\"htoc-email-authentication-only-select-as-a-last-resort\">Email Authentication (only select as a last resort)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-hb-message is-style-note wp-block-paragraph\"><strong class=\"message-label\">Note:<\/strong> If users across your organization use a distribution email, then we HIGHLY recommend using the Google Authenticator app as your first option and SMS as a second MFA factor, if you feel it is necessary. Using any email address, individual or shared, as an MFA factor should only be used as a last resort.<\/p>\n\n\n\n<figure class=\"wp-block-image is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"411\" height=\"879\" src=\"https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-Options.png\" alt=\"MFA Options screen.\" class=\"wp-image-3637\" style=\"aspect-ratio:0.6065857885615251;width:350px;height:auto\" srcset=\"https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-Options.png 411w, https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-Options-140x300.png 140w, https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-Options-23x50.png 23w, https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-Options-320x684.png 320w\" sizes=\"auto, (max-width: 411px) 100vw, 411px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">2. Once you choose a multi-factor authentication option, select the <strong>\u201cSetup\u201d<\/strong> button under it and follow the onscreen prompts.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If&nbsp;you&nbsp;elect&nbsp;to set up:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li id=\"htoc-google-authenticator-you-will-be-required-to-download-the-google-authenticator-mobile-application-from-the-apple-app-store-or-google-play-store-using-your-mobile-device\"><strong>Google Authenticator:<\/strong>&nbsp;You&nbsp;will be required to download the Google Authenticator mobile application from the Apple App Store or Google Play Store using&nbsp;your&nbsp;mobile device.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"414\" height=\"615\" src=\"https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-GoogleAuthenticator.png\" alt=\"Google Authenticator MFA screen.\" class=\"wp-image-3636\" style=\"aspect-ratio:0.6730769230769231;width:350px;height:auto\" srcset=\"https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-GoogleAuthenticator.png 414w, https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-GoogleAuthenticator-202x300.png 202w, https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-GoogleAuthenticator-34x50.png 34w, https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-GoogleAuthenticator-320x475.png 320w\" sizes=\"auto, (max-width: 414px) 100vw, 414px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<figure class=\"wp-block-image is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"415\" height=\"539\" src=\"https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-GoogleAuthenticatorCode.png\" alt=\"Enter code screen for Google Authenticator MFA.\" class=\"wp-image-3635\" style=\"aspect-ratio:0.7709251101321586;width:350px;height:auto\" srcset=\"https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-GoogleAuthenticatorCode.png 415w, https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-GoogleAuthenticatorCode-231x300.png 231w, https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-GoogleAuthenticatorCode-38x50.png 38w, https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-GoogleAuthenticatorCode-320x416.png 320w\" sizes=\"auto, (max-width: 415px) 100vw, 415px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li id=\"htoc-sms-authentication-during-set-up-you-will-be-prompted-to-provide-a-mobile-phone-number-capable-of-receiving-sms-text-messages-sms-text-message-fees-may-apply-depending-on-your-mobile-plan\"><strong>SMS Authentication:<\/strong>&nbsp;During set up, you&nbsp;will be prompted to provide a mobile phone number capable of receiving SMS text messages. SMS text message fees may apply depending on&nbsp;your&nbsp;mobile plan.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"415\" height=\"675\" src=\"https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-SMSCode.png\" alt=\"Enter code screen for SMS MFA.\" class=\"wp-image-3638\" style=\"aspect-ratio:0.6151142355008787;width:350px;height:auto\" srcset=\"https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-SMSCode.png 415w, https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-SMSCode-184x300.png 184w, https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-SMSCode-31x50.png 31w, https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-SMSCode-320x520.png 320w\" sizes=\"auto, (max-width: 415px) 100vw, 415px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li id=\"htoc-email-authentication-your-email-address-which-you-used-to-log-in-or-register-with-your-account-will-be-defaulted-to-receive-the-two-factor-authentication-code-this-email-address-cannot-be-changed-use-this-option-as-a-last-resort\"><strong>Email Authentication:<\/strong>&nbsp;Your&nbsp;email address, which you used to log in or register with&nbsp;your&nbsp;account, will be defaulted to receive the two-factor authentication code. This email address cannot be changed.&nbsp;<em>(Use this option as a last resort.)<\/em><\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"958\" height=\"575\" src=\"https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-Email-Notification.png\" alt=\"MFA notification email sample.\" class=\"wp-image-3633\" style=\"aspect-ratio:1.6657754010695187;width:623px;height:auto\" srcset=\"https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-Email-Notification.png 958w, https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-Email-Notification-300x180.png 300w, https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-Email-Notification-768x461.png 768w, https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-Email-Notification-50x30.png 50w, https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-Email-Notification-920x552.png 920w, https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-Email-Notification-600x360.png 600w, https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-content\/uploads\/MFA-Email-Notification-320x192.png 320w\" sizes=\"auto, (max-width: 958px) 100vw, 958px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-hb-message is-style-note wp-block-paragraph\"><strong class=\"message-label\">Note:<\/strong> We recommend that you set up at least two MFA methods in case you change one in the future. If you would like to add another MFA method, start at step 1 above.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img decoding=\"async\" src=\"\/schoolsecuresite\/wp-content\/uploads\/MFA-FactorSecondOptions.png\" alt=\"Set up MFA screen.\" style=\"aspect-ratio:0.5718954248366013;width:350px;height:auto\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When you set up your MFA, you can also register the device you used as a \u201ctrusted device,\u201d so you will not have to enter an MFA factor for 30 days if you use the same device and browser.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-text-color has-border-color has-alpha-channel-opacity has-border-background-color has-background is-style-wide\"\/>\n\n\n\n<h3 id=\"htoc-mfa-faqs\" class=\"wp-block-heading\">MFA FAQs<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>What is multi-factor authentication (MFA)?<\/strong><br>\nIt is an authentication method that adds an additional layer of security to users for accessing National Student Clearinghouse services. In addition to using a username and password, MFA prompts the user to enter a security code generated and sent to them based on the MFA option(s) they choose.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Why use MFA?<br>\n<\/strong>MFA is considered 99.9% effective against blocking automated cyberattacks. The Clearinghouse is adding layers of security to protect your data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Which MFA factor should I choose? Which is the most secure?<br>\n<\/strong>The Google Authenticator app is the most secure option to safeguard your data. SMS texts are considered 40.8% less effective than an authenticator app. However, if you are unable to use the Google Authenticator app, using SMS as your MFA factor is better than having no MFA at all. Email is considered the least secure method of the three&nbsp; MFA factors.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>I have an API connection. Do I need to implement MFA for the connection?<br>\n<\/strong>No, API connections do not require MFA.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>What about my FTP login? Is MFA required?<br> <\/strong>The Clearinghouse highly encourages enabling MFA in your FTP portal similar to your Clearinghouse Secure Site account. Although the process is slightly different, users can refer to <a href=\"https:\/\/help.studentclearinghouse.org\/dataexchange\/knowledge-base\/logging-on-to-your-account\/\">Logging On To Your Account<\/a>\u00a0on the Secure FTP knowledge base to enable MFA for FTP.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>How do I update or change my MFA?<\/strong><br>\nLog onto the Clearinghouse <a href=\"https:\/\/secure.studentclearinghouse.org\/acc\/servicedispatcher\">secure site<\/a>. Under \u201cMy account,\u201d click \u201cReset Multi-Factor\u201d&nbsp; and follow the prompts to reset your MFA factor.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>How often will I get prompted for MFA?<br>\n<\/strong>Once you register the device that you used to access the site, you can select it as a \u201ctrusted device.\u201d Once selected, you will not have to enter an MFA factor for 30 days if you use the same device and browser. If you use a different device or a different browser on the same device, you will be prompted to use your MFA factor before you can access our secure site.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>What happens if I use Incognito\/Private Mode on my browser?<br>\n<\/strong>Any browser in Incognito\/Private mode will register as a new device and will always require an MFA factor before allowing access.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Should a shared email address be used as an MFA factor?<\/strong><br>\nNo. You should use Google Authenticator app as your first option and SMS as a second MFA factor if you feel it is necessary. Using any email address, individual or shared, as an MFA factor should only be used as a last resort.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>How do I log on if I lost my phone and it is required for my MFA factor?<br>\n<\/strong>You have two options:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li id=\"htoc-self-service-if-you-are-within-30-days-of-registering-your-mfa-and-use-a-trusted-device-you-can-still-access-my-account-where-you-can-click-reset-multi-factor-to-reset-your-second-factor-to-your-new-phone-or-an-alternative-google-authenticator-app\"><strong>Self-service:<\/strong> If you are within 30 days of registering your MFA and use a trusted device, you can still access \u201cMy Account,\u201d where you can click \u201cReset Multi-Factor\u201d to reset your second factor to your new phone or an alternative Google Authenticator app.<\/li>\n\n\n\n<li id=\"htoc-contact-your-institution-s-user-administrator-your-user-administrator-can-reset-your-second-factor-for-you-by-following-a-process-like-the-self-service-one-above\"><strong>Contact your institution\u2019s user administrator:<\/strong> Your user administrator can reset your second factor for you by following a process like the self-service one above.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>Learn about setting up MFA as well as MFA frequently asked questions.<\/p>\n","protected":false},"author":4,"comment_status":"closed","ping_status":"closed","template":"","format":"standard","meta":{"footnotes":""},"ht-kb-category":[51],"ht-kb-tag":[93,103],"class_list":["post-3630","ht_kb","type-ht_kb","status-publish","format-standard","hentry","ht_kb_category-gettingstartedwithschoolsecuresite","ht_kb_tag-faq","ht_kb_tag-mfa"],"_links":{"self":[{"href":"https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-json\/wp\/v2\/ht-kb\/3630","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-json\/wp\/v2\/comments?post=3630"}],"version-history":[{"count":30,"href":"https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-json\/wp\/v2\/ht-kb\/3630\/revisions"}],"predecessor-version":[{"id":3997,"href":"https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-json\/wp\/v2\/ht-kb\/3630\/revisions\/3997"}],"wp:attachment":[{"href":"https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-json\/wp\/v2\/media?parent=3630"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-json\/wp\/v2\/ht-kb-category?post=3630"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/help.studentclearinghouse.org\/schoolsecuresite\/wp-json\/wp\/v2\/ht-kb-tag?post=3630"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}