Multi-Factor Authentication (MFA) adds an extra layer of security to user accounts. By default, TOTP is the current MFA requirement for staff; however, PSUs may switch users to WebAuthn if preferred. This workflow allows LEA Administrators to enable WebAuthn in bulk for users by uploading a file. Only users with the NCEdCloud LEA Administrator role will have access to submit this workflow. More information on how WebAuthn is used with NCEdCloud can be found here: How to enable WebAuthn
.png)
*Steps required to access this workflow can be found here
PSU CODE (Required): 3-digit PSU Code of the LEA Administrator requesting this workflow
MFA FILE (TEXT FORMAT) (Required)(Upload):Click the 'Browse' button, navigate to your file directory, and upload a file that contains a list of Staff user UIDs.
File formatting:
File must be save as a .txt file
No file headers
Each line should contain a single numeric UID with 10 or less digits
Example file
REQUEST COMMENTS (Optional): Enter any description you’d like to have associated with this group of UIDs
The validation process will first check if the above specifications are met. If validation fails here, the administrator should receive an email indicating which UID in the file resulted in the rejection.
The second validation step ensures that all of the users in the file are in the same PSU as the requestor (who specified a PSU during file submission) and that the accounts are active. If the file is rejected here, the administrator should receive an email indicating which UID in the file resulted in the rejection.
Once validation is complete, the UIDs will be iterated through and have the WebAuthn flag set if they do not already. If they already have the flag set, no action is taken.
In the event that a user's UID did not pass the verification process you will receive an email containing the Staff user UID and a brief explanation. You will then need to remove the user's UID from the file and resubmit the workflow.
Note: All required fields will need to be completed before you're able to click the request button to submit this form. The required fields are listed in this doc and are also marked with a red asterisk(*) on the form.
FAQs
What if I can't see the "Enforce MFA WebAuthn (File Upload)" request in the catalog?
You will need to have the LEA Administrator Role in order to access this request. More information on requesting Privileged Roles can be found here: Privileged Roles Info
How do I use WebAuthn to login to NCEdCloud?
Additional information on how to use WebAuthN to login to NCEdCloud can be found here: How to enable WebAuthn
What happens after I submit the "Enforce MFA WebAuthn (File Upload)" form?
After submitting the "Enforce MFA WebAuthn (File Upload)" form you will receive an email to the email address listed in NCEdCloud account. If you have any question about this workflow please submit a support ticket with Identity Automation by using the support portal (How to submit support ticket) or by email to support@identityautomation.com