Employee MultiFactor Authentication (MFA)

Overview

This summary will give you all the info you need regarding MFA at Edmonds College.

What's MFA

Multi-factor authentication (MFA) is a validation method that requires users to use two or more additional verification factors to access a resource (e.g., an application, online account, or VPN), rather than just a username and password. That means, if someone is trying to break into your account, they can’t get in without the second verification factor.

Why We Need It

Edmonds College must comply with several laws requiring MFA, including:

  • Family Educational Rights and Privacy Act (FERPA)
  • Federal Information Security Management Act (FISMA)
  • Health Insurance Portability and Accountability Act (HIPAA)
  • Gramm-Leach-Bliley Act (GLBA)
  • Executive Order 14028: Executive Order on Improving the Nation’s Cybersecurity

To Note

Under Washington State law (RCW 42.56) and state Supreme Court precedent (Nissen v. Pierce County), only records that relate to the conduct of public business are considered public records. Installing an authentication app or receiving a login verification push notification generates a local security token - it does not monitor devices, grant the college access to personal data, or expose personal phones  to PRA requests.

Where do I need it and how?

As an Edmonds College employee, you will primarily be interacting with three "main accounts", which encompass your access throughout different services. You are required to activate Multi-Factor Authentication in all three.

These accounts are:

What are my options?

Authentication methods supported by Google, Triton Access (Okta), and ctcLink. Okta Verify, Google Authenticator, and Hardware Security Keys are supported by all three; Okta FastPass only by Triton Access; Phone Number, Google Prompt, and Backup Codes only by Google.Installing an authentication app or receiving a login verification push notification generates a local security token - **it does not* monitor devices, grant the college access to personal data, or expose personal phones to PRA requests.*

​

Last Updated: September 14, 2026