Other Authentication Options
We strongly recommend that a smartphone-based authenticator app is used for MFA as this is more secure than other alternatives. The TOTP (Time-based one-time password) codes are generated every 30-60 seconds offline, reducing the risk of interception and smartphone applications often provide additional security features like biometrics locks.
If you are unable to use a smartphone, then there are some alternative options for you to set up MFA for your ESL account.
- Browser extensions
- Desktop applications
- Website-based MFA passcode generators.
While the methods listed above work, they are not recommended. These methods all lack separation between the device accessing sensitive information and the device providing the multifactor authentication. If a person with malicious intent wishes to access your account, they simply need to get hold of one device.
Our support is limited to the Authenticator browser extension, available on Edge, Chrome, and Firefox. This is the supported alternative to the Google and Microsoft Authenticator smartphone applications.
Please review the steps below to use the Authenticator Browser Extension as your Multifactor Authentication (MFA) for your Education Sector Logon (ESL) account.
Installing the Authenticator browser extension:
Go to https://authenticator.cc/ from your browser.
Click “Add to...” and select your browser.
Your browser should automatically be selected, if not, you will need to choose from Chrome, Edge or Firefox
You will be redirected to your browsers extensions store, follow the steps on the screen to add the extension to your browser.
If you’re unable to add the extension to your selected browser, you can try the other supported browsers (Chrome, Edge, or Firefox), alternatively you will need to contact your IT administrator for support.
Once installed, click on the extension icon to the right of your web address bar (URL)
Pin the Authenticator browser extension for easier access in future.
Open the Authenticator browser extension, click the Cogwheel icon (top left) to open settings, then click Sync Clock with Google.
You'll need to allow the sync in the pop-up window.
Setting a password (Optional)
As there is no separation between the device accessing sensitive information and the device providing the multifactor authentication, we strongly recommend setting a password for the Authenticator browser extension.
Open Authenticator browser Extension, click the Cogwheel icon (top left) to open settings, then click Security and set the Password and click Ok.
Once you have successfully set the password, the next time your browser is restarted, and you open the Authenticator browser extension, you’ll be asked to provide your Password.
Lock the Authenticator browser extension at any time by clicking the Lock icon.
Once locked, you will need to enter your password to gain access again.
How to perform first time MFA set up with the Authenticator browser extension:
Follow the steps below when you are prompted to set up MFA to access the Delegated Authoriser portal or MFA enabled applications, using your ESL account.
Click on the Authenticator browser extension to the right of your web address bar (URL) and click the Scan QR Code icon.
Follow the on-screen tutorial and select the QR Code from the ESL MFA set up page.
Alternatively, if you can’t Scan the QR Code:
click the Edit icon.
Click the plus icon.
Select Manual Entry
You will find the Account Name that can be used for the issuer field and the Secret Key required for the Secret field under the “Other authentication options” section on the ESL MFA set up page.
Note: Instead of using the Account Name provided on the MFA set up page, you can use "ESL" or a similar label in the Issuer field to easily identify this account.
Once you have entered the issuer and secret information, click Ok and a new passcode will appear.
On the MFA set up page, click continue.
Note: if you wish to cancel the set up after scanning the QR code or entering it manually, you will need to remove the ESL account that is now on your Authenticator browser extension too.
Open the Authenticator browser extension and enter the 6-digit code displayed.
You may need to provide permission to copy and paste the code, alternatively you can enter it manually.
Click Verify.
With a valid TOTP, you will now be logged in.
How to remove your ESL account from the Authenticator browser extension
Open the Authenticator browser extension to the right of your web address bar (URL).
Click the Pen icon on the top right to edit.
Delete the account.
Calling Service Desk
Service Desk will not be able to assist if you encounter issues downloading the extension to your browser, you will need to seek support from your IT administrator.
You can contact Service Desk for other MFA related queries or to check your MFA status.
Freephone: 0800 422 599 (NZ Only)
Email: service.desk@education.govt.nz
Note: To confirm your identity, you will be asked questions to verify your identity.