Stockport Grammar School Using Multi Factor Authentication with ISAMS

Due to a number of security issues caused by insecure passwords, ISAMS have taken the decision to require multi factor authentication (MFA) in order to access certain sensitive areas of ISAMS when logging in from outside school.
If not configured, you will be prompted to configure MFA before being allowed to log into isams.

The type of MFA that isams has chosen to implement requires you to install an Authenticator App on a mobile device or tablet that generates a new 6 digit code every 30 seconds.
The school recommends you use the 'DUO Mobile' app as this allows push notifications for other school services e.g. webmail.

If MFA is still to be set up for your iSAMS account, the next time you login to iSAMS you will be asked to configure two-factor authentication:

Following login, ISAMS will e-mail a 6 digit code to your school e-mail address.

• Once you enter a valid code (use the most recent e-mail if you have more than one), you will be presented with a QR code to configure your authenticator app.
• If you do not receive an e-mail, please contact the IT helpdesk as your account may not be setup correctly.

You must now launch the DUO Mobile app on your mobile device and click '+ Add' to add a new account:

Click 'Use QR code' and then scan the QR code still showing on your iSAMS login screen:

When prompted to name the account, it is recommended that you choose a name that is easily identifiable, such as 'iSAMS - username':

Under the newly created account on your DUO Mobile app you should now see a 6-digit code.

Enter this code into the 'Verification Code' box provided (below the QR code) on your iSAMS login screen and click 'Verify' - if all is well, you should now be logged in.

The next time you login, after entering your username and password you will be prompted to enter the 6 digit code from the DUO Mobile authenticator app:

If this last step fails, please check the time on your mobile device as the code generated is time sensitive.

There is an option for 'Don't ask again for 7 days' - under no circumstances should you tick this box on computers with an account that may be shared with any other person