About Multifactor Authentication

Quick Navigation

What is Multi-Factor Authentication (MFA)?

MFA is an IT security feature that provides an extra layer of security to your account. MFA can help to stop hackers from pretending to be you, even if they have your password, they are unlikely to also have the passcode generated by your multi-factor Authenticator application too.

This security feature may seem familiar as online banking systems and some social media platforms use MFA too.

We recommend using Google Authenticator or Microsoft Authenticator on your smartphone. These apps are available for free on the App Store or Play Store. While we only support these two, you may use other apps if preferred.

Your Authenticator generates a new 6-digit passcode that changes every 30 to 60 seconds, you will use this code to prove that you are authorised to access the ESL account.

Why is MFA needed?

Today passwords or passphrases are not enough. Cyber-criminals can:

•    guess your passphrase.
•    trick you into sharing your passphrase.
•    remotely access and control your devices.
•    try using stolen passphrase lists.

MFA adds an extra step in the login process, requiring users to confirm their identity through a secondary verification method.

Setting up MFA for your account helps the Ministry ensure that only you or those who are authorised can access privileged information, even if someone has gained access to your login credentials.

Setting up and using MFA:

Upon successful login with your ESL credentials, you will be prompted to set up MFA before accessing the ESL Delegated Authoriser portal or an MFA enabled application with your ESL account.

To begin the set up, we recommend downloading the Google Authenticator or Microsoft Authenticator app for free from Apple’s App Store or Google’s Play store. Most smartphone-based authenticator applications will work, but our support is limited to these two.

Refer to the help guides below for your chosen authenticator app

Most smartphone-based authenticator applications are similar and will operate like below:

1.    Scan QR code provided when prompted to set up MFA.
2.    Authenticator app will start generating Passcodes.
3.    Provide Passcode back to the application/website that is asking you for MFA.

If you are having trouble scanning the QR code, make sure that your camera is clear of debris, and nothing is covering the QR code either.

If you still can’t scan the QR code, use the manual entry option in your authenticator app and enter the Account name and Secret key provided in the “Other authentication options.” section on the MFA set up page on ESL as shown in the image.

Finding the Verification Passcode for MFA

Once you have set up your Authenticator App, you see the passcodes being generated and refreshed once you open the app. Make sure you are entering the correct code by verifying the name above the code. It will say Education Sector Logon.