This article provides a step-by-step guide for logging into an Arbor account using Google Single Sign-On and two-factor authentication. It covers the initial setup of an authenticator app, the login process, and troubleshooting tips for common issues. It also explains how to log out and the automatic logout feature after inactivity.
Using two-factor authentication, you can only use one device to authenticate to log in to your Arbor account. Make sure you are not using a publicly shared device.
Please note that only staff members can log into Arbor via Single Sign-On. Students and Guardians will not be able to log in using this method.
Logging in when two-factor authentication is enabled
Logging in for the first time
If your school requires two-factor authentication for all login types, you'll need to set up a link between your authentication app and your MIS.
Go to the login page of your MIS and click the Log in with Google button.
If you are already logged in to your Google account in your Google Chrome browser, you will be automatically redirected to the next step. Remember - We advise using Google Chrome to use Arbor as this is the most secure and reliable browser.
If you are not logged in to your Google account, you will be redirected to log in to your Google account. You will be asked to either select the Google account you want to use to log in to Arbor or log in to your Google Account. You must use your default work Google email address.
Once you successfully log in, you will be asked to set up a link to your authentication app.
The example below shows the process for Google Authenticator, but the process will be similar for other authentication apps such as Microsoft Authenticator, Authy etc. Your screen may look different from what is shown here depending on your device and software version.
For Android, open the Google Play store and search for ‘Google Authenticator'. Select the Google Authenticator app and click Install.
For iOS, open the App Store and search for ‘Google Authenticator’. Select the Google Authenticator app and click Get.
Open your authenticator app and begin a setup. We recommend choosing the option of scanning the QR code (barcode), but you can do a manual setup instead using your 16-digit code.
Open your authenticator app and click Begin setup to connect the app with Arbor MIS (this button may be called something else on Android devices or for other authentication apps).
Top Tip: Make a note of the 16-digit code you will see in Step 2. You’ll need to tell us this code if your phone ever gets lost, damaged or stolen to verify your account.
Once the setup of your authenticator is complete, enter your Arbor password and the verification code into Arbor, and click Log in.
Logging in again
Go to the login page of your MIS and click the Log in with Google button.
If you are already logged in to your Google account in your Google Chrome browser, you’ll be automatically redirected to the next step.
If you are not logged in to your Google account, you will be redirected to log in to your Google account. You will be asked to either select the Google account you want to use to log in to Arbor or log in to your Google Account. You must use your default work Google email address.
If you are logging in under a whitelisted IP address, you will be immediately logged in. If you log in using an IP address which is not whitelisted, you will need to complete second-factor authentication by entering the code generated in your app.
To get the verification code open the authenticator app. Enter the code (with no spaces) into the ‘Verification code’ field and click Verify access. If the code is correct, you will be logged in to the MIS.
If you can no longer generate a code (e.g. you no longer have your phone or have uninstalled the app), click the orange button.
This will send an email request to your admin to revoke your original setup. Once your old access has been revoked, you will need to set up your authentication app again to be able to log in.
Logging in when two-factor authentication is not enabled, or Bypass two-factor authentication for SSO accounts is enabled
Go to the login page of your MIS and click the Log in with Google button.
If you are already logged in to your Google account in your Google Chrome browser, you will be automatically redirected to the next step. Remember - We advise using Google Chrome to use Arbor as this is the most secure and reliable browser.
If you are not logged in to your Google account, you will be redirected to log in to your Google account. You will be asked to either select the Google account you want to use to log in to Arbor or log in to your Google Account. You must use your default work Google email address.
I can't log in
You can help troubleshoot and fix login issues here: Troubleshooting Two-factor authentication and Google authenticator App issues
If you receive an error when trying to log in, follow these instructions: Troubleshooting Single sign-on login errors
Logging out
To log out, just click the Sign out link at the top-right of your Arbor page. This will log you out of your school site.
Top Tip: This won't log you out of Google.
You will also be automatically logged out after a period of two hours of inactivity. If you click back into your Arbor tab just before the time is up, you can choose whether to remain logged in. This applies whether you have Two-factor authentication enabled or not.
Comments
Article is closed for comments.