Two Level Authentication
Subject - Two Level Authentication
We would like Skyward to incorporate two level user authentication in each of the following areas (Employee Access/Student Access/Secured Access/NSOE/Skyward Finance/Skyward HR/Skyward Student). We need this authentication to be set up for internal and external users with a configuration for each district to select from the following three options "Internal Only" "External Only" "Both Internal and External" for each area listed above. This is important to school districts since most district's have single sign on (Active Directory Login) and if a user's login is compromised it would allow the person gaining this information to have access to private personal or student information (Which could be HIPA/Ferpa violations.)
Additional information: Many districts have had very elaborate attempts to gain access to their systems and the people trying to gain access have even made the screens/emails look and feel like they are coming from their districts software. Many districts have done trainings and sent out many warnings to their staff but even with that people in the district have fallen victim to the schemes. (We are also experiencing more and more of these attempts to gain access to the software.) We are aware that Skyward has a third party software that can be used for this (RSA's Secure ID) but we need the flexibility and configurability to be in their Student and Financial Information systems.
To have this capability would allow districts to better secure the information in their Student and Financial Information systems.
Stan Fountain
shared this idea
-
IT Services Corporate
commented
Although 2 Factor Authentication (2FA) is not available as a native feature in SMS, 2FA is available by integrating your logins using Single Sign On (SSO) with many popular 2FA enabled systems like Azure, Google, Classlink, ADFS, and many other SAML enabled Identity Providers. To find out more information on 2FA features available by implementing SSO please visit my security blog found here: https://www.skyward.com/discover/insider/february-2020/skyward-security-best-practices