How to Turn ON Two-Factor Authentication (2FA) for Staff Login | openSIS Administration

How to enable Two-Factor Authentication (2FA) for Staff in openSIS

Overview

To improve account security and protect sensitive school data, openSIS supports Two-Factor Authentication (2FA) for staff logins. When enabled, staff members must verify their identity using a one-time password (OTP) sent to their registered email address during login.

This article explains how to enable 2FA, how it works, and important behavior rules to be aware of.

Where to Enable Two-Factor Authentication

Two-Factor Authentication is configured at the school level.

Navigation Path:

InfoSettings → School → Preferences

Slide the switch "Allow Two-Factor Authentication for Staff by Email" to turn on or off the 2FA requirements for all the Staff in the system. Click update to save.


Notes
This setting applies only to the selected school and is not a global system-wide setting.
You must do this school by school if you have more than one school in the system.

How Two-Factor Authentication Works

Once 2FA is enabled:

  1. A staff member logs in using their email address and password.

  2. An OTP (One-Time Password) is sent to the same email address.

  3. The staff member must enter the OTP to complete the login process.

Without successful OTP verification, access will not be granted.

OTP Delivery Method

  • OTPs are sent via email

  • The email used is the staff login email address

  • OTPs are valid for users until newly generated or correctly validated

If the OTP expires, the user must attempt login again to receive a new OTP.

Staff Enrolled in Multiple Schools

If a staff member is enrolled in multiple schools within openSIS:

  • The Home School’s preference determines whether 2FA is enforced

  • If the Home School has 2FA enabled, OTP verification will be required

  • If the Home School does not have 2FA enabled, OTP verification will not be required—even if other schools have it enabled

This ensures consistent login behavior for staff users across schools.

Trust This Browser (60-Day Option)

After successful OTP verification, staff users can choose to trust their browser.

How this works:

  • When “Trust this browser” is selected after entering the correct OTP

  • The system will not prompt for 2FA again on that browser for 60 days

  • This applies only to the same browser on the same device

When 2FA Will Be Required Again

2FA will be prompted again if:

  • 60 days have passed

  • The user logs in from a new browser or device

  • Browser cookies or local storage are cleared

Important Points to Remember

  • 2FA applies to staff logins

  • OTPs are sent to the registered login email

  • The Home School setting controls 2FA behavior for multi-school staff

  • Trusted browsers remain valid for 60 days

  • This feature enhances security without disrupting daily workflows

Terminology Note

In this article:
- Two-Factor Authentication (2FA)
- Multi-Factor Authentication (MFA)
- One-Time Password (OTP)
all refer to the same openSIS feature: email-based OTP verification for staff login, configured at the school level.

Need Help?

If you experience issues receiving OTP emails or have questions about enabling Two-Factor Authentication, please contact your school administrator or the openSIS support team.



    • Related Articles

    • How to Configure Office 365 SSO Login in openSIS

      Overview Microsoft Office 365-based Single Sign-On (SSO) is now available in openSIS. This guide will help you set up and enable SSO so that users can log in with their Microsoft credentials. Step 1: Register Your App in Microsoft Azure Go to the ...

    • How to Enable ECTS in openSIS

      The European Credit Transfer and Accumulation System (ECTS) is an academic credit framework primarily used by European institutions to measure student workload and academic progress. Since ECTS is not followed globally, openSIS provides it as an ...

    • How to Integrate Google SSO with openSIS

      Introduction Google Single Sign-On (SSO) allows users to securely access openSIS using their Google account credentials. This not only enhances security but also simplifies the login experience for students, teachers, and administrators. This guide ...

    • How to Add Staff Custom Fields in School Settings

      When you need to add staff custom fields you can navigate to the settings on the menu bar and find the staff on top. Menu Bar >> Settings >> Staff Click on Staff Fields. When you enter the Staff fields section you will find some default categories ...

    • How to set login failure allowance and login inactivity days

      To set login failure allowance and login inactivity days, navigate to: Menu Bar >> Settings >> School Click on Preference. In Preference, you need to set your login preference (sample data given). Once complete, click Update to save the data. The ...