Support PRONOTE-
Manage dual authentication for staff and teachers
Following malicious acts against Digital Workspaces (ENT) and recommendations from ANSSI (French National Security and Information Systems Agency), dual authentication for staff and teachers is now mandatory by default. However, you are free to reinforce or relax certain measures depending on the type of user.
Dual authentication is the most effective security measure, so we recommend that you do not deactivate it. It requires teachers and staff to enter a PIN code (minimum 4 digits) when logging on from a new device (and only then). In practical terms, this prevents someone who has stolen a teacher's or staff member's password from logging on from a device not registered by the teacher or staff member.
Dual authentication is the most effective security measure, so we recommend that you do not deactivate it. It requires teachers and staff to enter a PIN code (minimum 4 digits) when logging on from a new device (and only then). In practical terms, this prevents someone who has stolen a teacher's or staff member's password from logging on from a device not registered by the teacher or staff member.
- Go to the menu Parameters >General options > Protecting accounts.
- Select a user type on the left.
- In the frame Connection from a new device, you can choose to impose a solution or leave it up to the user to define additional safety features.
- In both cases, you can define what you want to impose, or what you want to propose to users:
- for optimum safety, select Impose a solution, then only tick Set a PIN code.
The option Authorize PIN code reset request allows teachers or staff who have forgotten their PIN code to set a new one. Please note that only those with a valid e-mail address entered in PRONOTE will be able to use this PIN code reset function. - to ensure minimum security and leave users with an alternative, you can select Give a choice for a solution and tick Set a PIN code or Notification of connections from an unregistered device (which, at the very least, allows you to be notified when a connection from a new device is detected).
- for optimum safety, select Impose a solution, then only tick Set a PIN code.
Dual authentication is normally an effective and straightforward measure. If you find that users are systematically asked for dual authentication (and not just from a new device), the browsers of the devices concerned probably need to be configured.
Was this content useful to you?
Can't find an answer to your question ?
Contact our support