1. Once multi-factor authentication (MFA) has been enabled, you will be prompted to set up multi-factor authentication upon login to the National Student Clearinghouse secure site<\/a>. You must set up at least one MFA option to complete account setup and access Clearinghouse services. To learn more, read the MFA <\/strong><\/a>FAQs<\/strong> below.<\/p>\n\n\n\n The available MFA options include:<\/p>\n\n\n\n Note:<\/strong> If users across your organization use a distribution email, then we HIGHLY recommend using the Google Authenticator app as your first option and SMS as a second MFA factor, if you feel it is necessary. Using any email address, individual or shared, as an MFA factor should only be used as a last resort.<\/p>\n\n\n\n <\/p>\n\n\n\n 2. Once you choose a multi-factor authentication option, select the \u201cSetup\u201d<\/strong> button under it and follow the onscreen prompts.<\/p>\n\n\n\n If you elect to set up:<\/p>\n\n\n\n <\/p>\n\n\n\n <\/p>\n\n\n\n <\/p>\n\n\n\n Note:<\/strong> We recommend that you set up at least two MFA methods in case you change one in the future. If you would like to add another MFA method, start at step 1 above.<\/p>\n\n\n\n <\/p>\n\n\n\n When you set up your MFA, you can also register the device you used as a \u201ctrusted device,\u201d so you will not have to enter an MFA factor for 30 days if you use the same device and browser.<\/p>\n\n\n\n <\/p>\n\n\n\n 1. Log in to your National Student Clearinghouse account.<\/p>\n\n\n\n 2. Select the \u201cEdit Your Account<\/strong>\u201d button in the left navigation bar.<\/p>\n\n\n\n <\/p>\n\n\n\n 3. Next, select \u201cReset MFA<\/strong>.”<\/p>\n\n\n\n <\/p>\n\n\n\n Note:<\/strong> Administrators will land on the “Manage Users<\/strong>” page and must select “My Account<\/strong>” to get to this page.<\/p>\n\n\n\n 4. Select \u201cReset MFA<\/strong>\u201d to proceed after reading the disclaimer message. Please read the message carefully and note that you must log out of the account for which MFA is reset. The new MFA option will be presented at the next login.<\/p>\n\n\n\n <\/p>\n\n\n\n 5. Log out, then log in again.<\/p>\n\n\n\n 6. You will be prompted to set up your MFA.<\/p>\n\n\n\n <\/p>\n\n\n\n What is multi-factor authentication (MFA)?<\/strong> Why use MFA? Which MFA factor should I choose? Which is the most secure? I have an API connection. Do I need to implement MFA for the connection? How often will I get prompted for MFA? What happens if I use Incognito\/Private Mode on my browser? Should a shared email address be used as an MFA factor? <\/p>\n\n\n\n How do I log on if I lost my phone and it is required for my MFA factor? <\/p>\n","protected":false},"excerpt":{"rendered":" Setting Up Multi-Factor Authentication (MFA) Note: This information does not apply to API. APIs do not require MFA. 1. Once multi-factor authentication (MFA) has been enabled, you will be prompted to set up multi-factor authentication upon login to the National Student Clearinghouse secure site. You must set up at least…<\/p>\n","protected":false},"author":3,"comment_status":"closed","ping_status":"closed","template":"","format":"standard","meta":{"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_forum_subforum_count":0,"footnotes":""},"ht-kb-category":[20],"ht-kb-tag":[70,69],"class_list":["post-1706","ht_kb","type-ht_kb","status-publish","format-standard","hentry","ht_kb_category-managing-account","ht_kb_tag-faq","ht_kb_tag-mfa"],"_links":{"self":[{"href":"https:\/\/help.studentclearinghouse.org\/vsrequestors\/wp-json\/wp\/v2\/ht-kb\/1706","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/help.studentclearinghouse.org\/vsrequestors\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/help.studentclearinghouse.org\/vsrequestors\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/help.studentclearinghouse.org\/vsrequestors\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/help.studentclearinghouse.org\/vsrequestors\/wp-json\/wp\/v2\/comments?post=1706"}],"version-history":[{"count":22,"href":"https:\/\/help.studentclearinghouse.org\/vsrequestors\/wp-json\/wp\/v2\/ht-kb\/1706\/revisions"}],"predecessor-version":[{"id":2141,"href":"https:\/\/help.studentclearinghouse.org\/vsrequestors\/wp-json\/wp\/v2\/ht-kb\/1706\/revisions\/2141"}],"wp:attachment":[{"href":"https:\/\/help.studentclearinghouse.org\/vsrequestors\/wp-json\/wp\/v2\/media?parent=1706"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/help.studentclearinghouse.org\/vsrequestors\/wp-json\/wp\/v2\/ht-kb-category?post=1706"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/help.studentclearinghouse.org\/vsrequestors\/wp-json\/wp\/v2\/ht-kb-tag?post=1706"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}\n
![\"\"](\"\/vsrequestors\/wp-content\/uploads\/MFA-Options.png\")
<\/figure>\n\n\n\n\n
![\"Google](\"\/vsrequestors\/wp-content\/uploads\/MFA-GoogleAuthenticator.png\")
<\/figure>\n\n\n\n![\"Enter](\"\/vsrequestors\/wp-content\/uploads\/MFA-GoogleAuthenticatorCode.png\")
<\/figure>\n\n\n\n\n
![\"Enter](\"\/vsrequestors\/wp-content\/uploads\/MFA-SMSCode.png\")
<\/figure>\n\n\n\n\n
![\"MFA](\"\/vsrequestors\/wp-content\/uploads\/MFA-Email-Notification.png\")
<\/figure>\n\n\n\n![\"\"](\"\/vsrequestors\/wp-content\/uploads\/MFA-FactorSecondOptions.png\")
<\/figure>\n\n\n\n
\n\n\n\nHow to Update or Change Your MFA<\/h2>\n\n\n\n
![\"\"](\"\/vsrequestors\/wp-content\/uploads\/MFA-EditYourAccount.png\")
<\/figure>\n\n\n\n![\"\"](\"\/vsrequestors\/wp-content\/uploads\/DefaultScreen.jpg\")
<\/figure>\n\n\n\n![\"\"](\"\/vsrequestors\/wp-content\/uploads\/ResetMFA.jpg\")
<\/figure>\n\n\n\n
\n\n\n\nMFA FAQs<\/h2>\n\n\n\n
\nIt is an authentication method that adds an additional layer of security to users for accessing National Student Clearinghouse services. In addition to using a username and password, MFA prompts the user to enter a security code generated and sent to them based on the MFA option(s) they choose.<\/p>\n\n\n\n
\n<\/strong>MFA is considered 99.9% effective against blocking automated cyberattacks. The Clearinghouse is adding layers of security to protect your data.<\/p>\n\n\n\n
\n<\/strong>The Google Authenticator app is the most secure option to safeguard your data. SMS texts are considered 40.8% less effective than an authenticator app. However, if you are unable to use the Google Authenticator app, using SMS as your MFA factor is better than having no MFA at all. Email is considered the least secure method of the three MFA factors.<\/p>\n\n\n\n
\n<\/strong>No, API connections do not require MFA.<\/p>\n\n\n\n
\n<\/strong>Once you register the device that you used to access the site, you can select it as a \u201ctrusted device.\u201d Once selected, you will not have to enter an MFA factor for 30 days if you use the same device and browser. If you use a different device or a different browser on the same device, you will be prompted to use your MFA factor before you can access our secure site.<\/p>\n\n\n\n
\n<\/strong>Any browser in Incognito\/Private mode will register as a new device and will always require an MFA factor before allowing access.<\/p>\n\n\n\n
\n<\/strong>No, we recommend using your work email address if you can\u2019t use Google Authenticator or SMS as your factor. If you need service or order-related notifications sent to a shared or group email, you can specify this on the order confirmation page of your verification request.<\/p>\n\n\n\n![\"\"](\"\/vsrequestors\/wp-content\/uploads\/OrderContactInformation.png\")
<\/figure>\n\n\n\n
\n<\/strong>You have two options:<\/p>\n\n\n\n\n