OneLogin User Guide for TUHSD Staff

This guide provides step-by-step instructions for users accessing Google Workspace and other resources through the new, more secure, and reliable OneLogin sign-in process. You will be guided through entering your credentials, setting up Multi-Factor Authentication (MFA) – also known as 2-factor authentication (2FA) – and finally, accessing your Google-authenticated resources.

Important: We highly recommend using OneLogin Protect as your Multi-Factor Authentication method for its security and ease of use. This app needs to be installed on your smartphone and functions as a simple authentication application. Installing it on your smartphone allows you to access your work account on your computer. This app is not an email client and installing it on your phone does not bring work emails to your phone.

For users that have Google Authenticator set up. We've identified a specific issue where some users are encountering a loop when trying to sign into their Google account using Google Authenticator, as the app itself requires a Google sign-in.

To resolve this, you will need to configure OneLogin Protect as your Multi-Factor Authentication (MFA) replacement for your tamdistrict account.

Part 1: Initial Sign-In to OneLogin

Most of you will automatically be prompted to use OneLogin as part of your regular sign-in. If you are, you can skip to Part 2 of the guide.

If you haven't been prompted yet, you can start the process by following Step 1 manually. 

1. Navigate to the OneLogin Sign-In Page:
   • Open your internet browser and go to the following link: https://tamdistrict.onelogin.com
2. Enter Your OneLogin User ID:
   • You will see a sign-in page prompting for your "Email".
   • At this page, type your email as your user name and click the "Continue" button.
     
3. Enter Your Password:
   • The page will now prompt for your password.
   • Type your Password in the field provided.
   • Click the "Continue" button.

Part 2: Setting Up Multi-Factor Authentication (MFA)

Upon successful password entry, you will be prompted to register Multi-Factor Authentication (MFA), sometimes called 2-factor authentication, before you are granted access. You must register one authentication method to access your resources. This part only needs to be done once, unless you replace your phone or something goes wrong during the setup process.

We strongly encourage you to choose OneLogin Protect for this purpose.

1. Begin MFA Setup:
   • On this screen, you will be prompted to register Multi-Factor Authentication or MFA (sometimes called 2-factor authentication) before you are granted access.
   • Click the "Begin Setup" button to go to the next screen, which will have the authentication factor for you to register.
     
2. Select "OneLogin Protect":
   • The next screen will display various authentication factors.
   • Select "OneLogin Protect" from the list of options.
     
3. Use OneLogin Protect:
   • Download and install the OneLogin Protect app on your smartphone.
   • This image shows the correct app:
     
4. Scan the QR Code to Link OneLogin Protect:
   • On your computer screen, after selecting "OneLogin Protect," you will see the Activate button. Click on it.
     Note: Do not click on the App Store and Google Play buttons if you're on a computer. OneLogin Protect is meant to be installed on a smartphone. 
     
   • Open the OneLogin Protect app on your mobile device.
   • Press the plus + icon to add a new account
   • Press OneLogin for the kind of account you are adding
   • Scan the QR code (from within the OneLogin Protect app as guided by the above steps).
     Note: This QR code is just a screenshot of what you will see on your computer screen. Do not scan this QR code.
     

Part 3: Using the app to access your work account

Once everything is set up correctly, you will be presented with one of two ways to complete the authentication process. When and how often this happens depends on a few things including your risk score. This is application based and considers factors like what device you're using, what your current IP is, time of day, etc. If you clear your browser cookies, you will be prompted for 2FA. The longest you could go without being prompted for 2FA in our environment is 30 days.

Here are the two different ways that will be used to complete the authentication process.

1. Number Matching
   • On your computer screen, you will see a OneLogin Protect window with a randomly generated two digit number.
     
     
   • On your smartphone, you will get a pop-up where you enter the number displayed at login.
     
     
   • Press the Accept button to complete the authentication process.
2. Six-digit-code authentication
   • If you're prompted to enter a code, please open up your OneLogin Protect app.
     
     
   • Type the code you see in your app into the field on the device that you're signing in on.

Need Assistance?

If you encounter any issues during this process, please submit a ticket to the IT Helpdesk for assistance.