School sign-in and two-step sign-in for admins
Have your teachers sign in with the school’s Google Workspace or Microsoft account, and set up the two-step sign-in every admin needs.
Two-step sign-in for admins
Every admin of a School plan workspace uses two-step sign-in. Until you add a passkey or an authenticator app, the workspace’s settings, members and reports stay closed; your own board and tools keep working.
- Open the workspace and choose Add a passkey or Use an authenticator app.
- Follow the steps on your account page and keep the 10 recovery codes.
The admin pages ask for your second step again every 12 hours, however you signed in. An admin’s last passkey or app cannot be removed.
Turn on school sign-in
The school’s email domain must be verified first, under Settings, General, Verified domain.
- Choose Settings, then General, and find School sign-in.
- Choose Only the school’s Google Workspace or Only the school’s Microsoft account. The page says how many teachers will be asked to sign in again.
- Choose Continue with Google or Continue with Microsoft and sign in once with your school account.
From then on, teachers with an address at your domain sign in only with that button. They cannot use the email code, and the sessions they have open end.
Microsoft Entra
Your school’s Microsoft Entra admin may have to approve the app once before teachers can sign in. A personal Microsoft account cannot turn on school sign-in.
Turn it off
Choose Any method, then Turn off school sign-in. Every change is written to the audit log.