SSO and international parent account access

Phil Paskvan
Phil Paskvan
Ninth Anniversary Kudos 1 Name Dropper Facilitator 1
in Blackbaud Learning Management System™

When I launch this Friday, employees and students should not see much of a change as we use google to authenticate. Parents will need to create 2FA if using hotmail/yahoo etc assuming I understand correctly. I am worried about the users with apple mail who hit “keep email private”, I have had issues already with this. My bigger concern are international student's families. How will this effect users with Chinese emails for example, or users with international phone numbers who cannot get 2FA codes? We cannot have them use google as it is unavailable in China. Anyone dealing with this?

Comments

  • Brian Gray
    Brian Gray Community All-Star
    Eighth Anniversary Kudos 5 First Reply bbcon 2025 Attendee Badge

    @Phil Paskvan - It sounds like you may be conflating two different things…

    Employees (and others with certain roles) are required to either use SSO or must have 2FA. (They could do both, but that's not required.)

    Parents must have a BB-ID and typically do NOT use SSO. They can use any email address for the BB-ID. Sign-in with Google works well. Sign-in with Apple works - but with the problem you mentioned if the parent asks apple to hide the email address. They can also use the email address and a password. As far as I know, there is no requirement for someone with only the Parent role to use 2FA.

    At my school, we use Google SSO for students and employees. Employees who are also parents of students still use the school email address and SSO. We require employees to use 2FA on the Google account.

    You can use this Knowledge Base article to help parents who use Sign-in with Apple and choose to hide the email address despite the warning.)

Categories