What are single sign-on and two-factor authentication?
Google sign-on (SSO)
Google sign-on is a secure authentication system that reduces the burden of login for your user because they can sign in to Arbor using their Google account. To use Google single sign-on, you must also have two-factor authentication switched on.
Two-factor authentication ensures school staff are the only people who can access their accounts using a code generated on their phone, even if someone else knows their Arbor password. We use Google Authenticator as our two-factor authentication provider, which is free of charge. As part of two-factor authentication, you can use IP whitelisting to allow staff to log into the MIS from the school's IP address without needing to complete the second step of the two-factor authentication.
Who can set up these features?
Google Single Sign-on and two-factor authentication are currently available on the Perform package. If you're not on this package, you won't be able to set up these features. For more details on this feature, or if you'd like to upgrade to the Perform package, please get in touch with us via email.
If your school is already on the Perform package, you'll need the School: Permissions: View and either the Staff: User Details: Administer or School: General Admin: Administer permissions.
We have two guides available, depending on whether you would like to set up Google single sign-on (with two-factor authentication), or just two-factor authentication.
To download and view the guide for Single sign-on with two-factor authentication, click the link below.