Multi-factor Authentication for Local Sign On?

[ALYSSAGOUDY-ADM]

We are interested in enabling some form of multi-factor authentication for our local sign on (the /login/canvas URL sign on) for accounts that use the local sign on to perform tasks or interact with our instance of Canvas.

I've looked at a few different articles online, but have not found anything too promising--wanted to see if anyone had any suggestions or similar questions/suggestions!

[chriscas · Accepted solution]

Hi @ALYSSAGOUDY-ADM,

If you have an Instructure-hosted paid Canvas instance, your Customer Success Manger (CSM) should be able to enable MFA for the Canvas login.  We worked with our CSM on this a few months ago and everything is working well here for our non-SSO users now.

Hope this helps!

-Chris

[ALYSSAGOUDY-ADM]

Thank you! I saw the support guide regarding this--do you know if it is only for those not signing in through the SSO? We do not want our users that use the SSO with 2FA to have to do it twice so to speak. We have a paid instance for a private liberal arts college.

[chriscas]

Hi @ALYSSAGOUDY-ADM,

You can configure it in different ways, but doing what you describe is exactly what we have.  Users coming through /login/canvas will be prompted for the Canvas MFA, which users coming in through our SSO are not prompter for Canvas MFA (our SSO already does MFA, so we don't need it duplicated).

-Chris