Login with Multi-Factor Authentication to the Clearinghouse Secure Site (3 minutes)
Learn how to get started with multi-factor on the Clearinghouse secure site and how to reset multi-factor.
Resources
Video Transcript
Let's cover how to set up multi-factor authentication, also known as MFA. Once you submit your username and password to login, you'll complete an additional security measure called MFA to protect your account from unauthorized access. You can have a security code sent to an authenticator app, your mobile phone as an SMS text message or your email. The Clearinghouse highly recommends using the authenticator app as it's the most secure option. If that's not possible, then use your mobile phone with an SMS text message, which is the next most secure option. As a last resort, and only as the last resort, should you select email because it is the least secure MFA option. To set up MFA, select setup under the MFA option you would like to use and follow the prompts to complete the setup.
[Screen changes to Setup Google Authenticator. Of the two options, Android is selected and the Next button is selected. The instructions change to launch the authenticator on the user's phone, tap the "+" icon and select "scan barcode". It also has a QR code. A dark gray lower third with white text states that if you don't have Google Authenticator, to download it from the app store on your phone. Then open the authenticator app. A phone pops up in the lower right, opens the Play Store app, searches for Google Authenticator. Google Authenticator displays in the results with an "install" button. Install button is clicked and it changes to "open". Phone screen returns to home screen and Google Authenticator icon is highlighted. In the Google Authenticator app, "Add a Code" button is selected. On the setup your first account screen, "Scan QR Code" button is selected. Phone screen shows a yellow box window showing the QR code. Beneath the box is text: Place code within yellow lines. The site has been added to the authenticator app and there is a six digit code listed on the phone. On the screen with the QR code to scan, the next button is highlighted. Phone disappears. Screen returns to setup multi-factor page. Google authenticator has been added to the enrolled factors list. "Setup" button under SMS text message is highlighted. Screen changes to receive a code via SMS message. The country code is selected as United States and a phone number is entered and "Send Code" button is selected. The button changes to sent and a field appears below to enter code with a verify button. A partial phone appears in the bottom right with the following text: Do not share this code with anyone. Your code: 000000. The code is entered and the "verify" button is selected. Phone disappears. Screen returns to multi-factor setup page where SMS Text Message has been added to the enrolled factors list.]
We recommend that you set up two MFAs in case one changes in the future.
["Finish" button is selected.]
When you're done, select finish.
[Screen shows Terms and Conditions.]
You are now logged into our site.
[Changes to a slide with Subsequent Logins and a computer monitor with the Clearinghouse user login page that's filled out and "Log In" button is highlighted. Screen changes to Google Authenticator screen asking for a code. There is a drop-down to change method of MFA. There is a checkbox to not be challenged on the device again. SMS Authentication is selected from the change method of MFA drop-down. The phone number is listed. "Send Code" is selected. Enter Code field and "Verify" button are added.]
On future logins, the multi-factor authentication will appear after entering your user credentials. Select the MFA to which you want to send the six-digit authentication code by clicking the change MFA drop-down menu, selecting the desired MFA and then clicking send code.
[The phone appears in the bottom right with the code. The code is entered into the "enter code" field.]
Enter the code you received on your phone or in your email.
[The checkbox to not be challenged on the device again is highlighted but not checked.]
You can also opt to register your device as a trusted device which means you won't be presented with an MFA for 30 days as long as you log on using the same device and browser. If you use incognito or private mode on your browser, you'll be presented with the MFA every time. Please consult your IT Department's policy before deciding to enable this option.
[Screen changes to the Account Management page. On the left is the Personal Information section including name, title and email address. On the right is Account Details, User Administration Information and FTP Information. Under Account Details, "Reset MFA" button is selected. A popup states you have chosen to reset MFA and upon next login you will be prompted to set up a new one. Two options: Reset MFA and Cancel. "Reset MFA" button is selected.]
If you need to reset your MFA options, log on and navigate to my account and select reset multi-factor.
[Screen changes to Unable to Login? Reach out to your user administrator. For colleges and universities, the user administrator is usually your registrar and/or financial aid director. There's a computer monitor displaying an email to a user administrator and changes to a notice that resetting MFA removes all MFAs for that user's account and new ones will need to be setup.]
If you are unable to log in, please reach out to your user administrator to request a multi-factor authentication reset. You cannot remove just one MFA. Once reset multi-factor is selected, all the MFAs you created will be removed.
[Computer monitor changes to show a sample MFA reset email notification. It includes the type of multi-factors, date, location and what to do if you don't recognize the activity.]
You will receive an email notification that your MFA has been reset. This concludes how to log in with multi-factor authentication.
