What are single sign-on and two-factor authentication?
Single sign-on (SSO)
Single Sign-on is a secure authentication system that reduces the burden of login for your user because they can sign in to Arbor using their Google or Microsoft school account. To use Single sign-on, you must also have two-factor authentication switched on.
Two-factor authentication ensures school staff are the only people who can access their accounts using a code generated on their phone, even if someone else knows their Arbor password. We use Google Authenticator as our two-factor authentication provider, which is free of charge. As part of two-factor authentication, you can use IP whitelisting to allow staff to log into the MIS from the school's IP address without needing to complete the second step of the two-factor authentication.
Who can set up these features?
Google or Microsoft Single Sign-On and Two-factor authentication are now available for all schools to set up and use no matter what package you've purchased.
You'll need the School: Permissions: View and either the Staff: User Details: Administer or School: General Admin: Administer permissions.
We have different guides available, depending on whether you would like to set up Single sign-on (with two-factor authentication), or just two-factor authentication.
To download and view the guide for Google or Microsoft Single sign-on with two-factor authentication, click the link below.
Please note that we're not able to help you with any issues you might have with your Google or Microsoft setup, so if you're having trouble, please contact Google or Microsoft support.
To make sure that our setup and troubleshooting guide is as useful as it can be, we'd love you to join our testing group to let us know if anything's missing. To be part of our testing group, sign up using this form.