All Staff (Enforced) MFA Opt-in

Prev Next

Multi-Factor Authentication (MFA) adds an extra layer of security to user accounts. This enhanced security may be required for various reasons, such as accessing Personally Identifiable Information (PII) of students and/or employees, financial or HR data, or administrator and technical support accounts. Submitting this request will require all PSU employees to use MFA when authenticating with NCEdCloud. Please note: Only users with the NCEdCloud LEA Administrator role will have access to submit this opt-out form. More information on how MFA is used with NCEdCloud can be found here: Multi-Factor Authentication (MFA) Info

PSU CODE (Required): 3-digit PSU Code of the PSU all Staff MFA will be enforced at.

GO LIVE DATE (Required): Choose a preferred date to enable MFA for all Staff at your PSU. You can either enter the date (MM/DD/YYYY format) into the text input field or by clicking the pop out calendar icon to the right of the text input field and selecting a date.

CONTACT PHONE NUMBER/EMAIL (Optional): Please provide a contact phone number or email address. In the event we are not able to contact you via your email address listed in NCEdCloud regarding your request, we may use this phone number/email as an alternative communication method.

ENFORCE MFA FOR ALL STAFF (Required)(Checkbox): Check this box to confirm you're requesting to Enforce MFA for ALL Staff.

REQUEST COMMENTS (Optional): Not required, An Identity Automation team member will be in contact with you to address any questions or concerns you may have.


Note: All required fields will need to be completed before you're able to click the request button to submit this form. The required fields are listed in this doc and are also marked with a red asterisk(*) on the form.


What if I can't see the "All Staff (Enforced) MFA Opt-in" request in the catalog?

You will need to have the LEA Administrator Role in order to access this request. More information on requesting Privileged Roles can be found here: Privileged Roles Info

How do I use MFA to login to NCEdCloud?

Additional information on how to use MFA to login to NCEdCloud can be found here: How do I use MFA to log in?

What if an Employee is active at another PSU that doesn't have MFA enforced?

Opting into Enforced MFA at your PSU will require all Employees to use MFA even if they're active at a PSU where MFA isn't being enforced.

Can I do a enforced MFA phased rollout?

You can do a phased rollout of enforced MFA by leveraging the "LEA Enforce MFA" request that is also located in the Request Module. This request can be used by uploading a text (.txt extention) file with a list of user's UID to enforce MFA (1 UID per line containing no delimiter). Note: If your txt file contains any disabled users and/or users not currently listed at your PSU you will receive an email alerting you remove the specific user before reuploading the txt file to resubmit the request. 

What happens after I submit the "All Staff (Enforced) MFA Opt-in" form?

After submitting the "All Staff (Enforced) MFA Opt-in" form you will be emailed a copy of the form to your NCEdCloud email address. A ticket will then be generated and an Identity Automation team member will reach out to follow up on your request. In the event your NCEdCloud email address is incorrect we may use the phone number/email entered in this form to contact you. If you haven't been contacted by an Identity Automation team member withing 24 hours please submit a support ticket with Identity Automation by using the support portal (How to submit support ticket) or by email to support@identityautomation.com