DistrictID is the second factor for K-12 students. Students keep signing in at Microsoft. When Entra asks for a second factor, DistrictID verifies the student with a passcode or a picture and signs the answer back. No phones, no migration, no new identity provider.
Talk to Us About a PilotEntra's second factors expect an authenticator app, a text message, a phone call or a security key. A second grader has none of those, so most districts leave student MFA off.
An unprotected student account is an easy first step for an attacker: phish teachers from a trusted internal address, then work toward staff and admin access.
New to student MFA? Read our practical guide for district IT.
DistrictID uses Microsoft's external MFA framework. Entra stays your identity provider and your front door.
Same Microsoft 365 sign-in as today, with their district account and password.
Your Conditional Access policy requires a second factor and hands off to DistrictID.
A 6-digit passcode, or a picture and a short code for the youngest grades.
Entra receives a signed result and finishes the sign-in. The student never leaves the Microsoft flow.
The controls a K-12 district actually needs, without handing students a phone.
Add DistrictID as an external MFA method in the Entra admin center, copy two values back, verify you own the tenant, and switch it on.
Every student sign-in is scored, and each score comes with a plain-English reason. Blocking stays off until you turn it on, so you can watch it in log-only mode first.
A picture or a shorter passcode for the youngest students, a 6-digit passcode for older grades, and per-student accommodations.
Allow, block or add risk to sign-ins by U.S. state, plus school-hours and app-level rules.
For a risky sign-in, a guardian can approve it and trust the home network, for 90 days by default.
A teacher resets a code for her own students only, capped at 20 a day, and every reset is audited. The forgotten-code ticket never reaches IT.
DistrictID stores what it needs to verify a sign-in and nothing about a student's schooling.
Microsoft, Microsoft 365 and Entra are trademarks of the Microsoft group of companies.
We connect DistrictID to a sandbox Entra tenant first, so your team sees the full sign-in round trip before a single student uses it.
Email Us About a Pilot info@cornerstone-innovations.com