Arbor - Request for authentication app setup revoke in Arbor - notification, how to stop this

[timbo343]

Some of our users who are part of certain groups:

 

- Administration Assistant

- Assistant Head Teacher

 

are receiving the following email when our staff are clicking / tapping on the orange button that says "I don't have authentication app on my phone". 

 

Hi ****,

******** has requested to revoke their authentication app setup for Arbor.

Please make sure that this is a genuine request and follow the next link to perform the action: https://******.arbor.education/

All the best,
Team Arbor

 

We've tried to disable some of the permissions against these groups but nothing seems to be working.

 

Arbor's help guide doesn't really tell you how to resolve this issue - https://support.arbor-education.com/hc/en-us/articles/4401060308381-Why-have-I-been-sent-an-email-to-revoke-access-for-Two-factor-authentication

 

Anyone been able to find this setting to stop the notifications?

[SpreadsheetJockey]

Anyone with "Staff: User Details: Administer" or "School: General Admin: Administer" permissions will get those emails, which is often a ridiculous number of people if you are using Arbor's default business roles.

 

I think Arbor has only consulted senior teaching staff when it comes to setting default permissions, because roles like 'Senior Management Team' can access and break anything they like, but somehow 'ICT manager' does not come out of the box with full admin access... 

• Go to School > Users & Security > Access Control > Permissions and find the permission "Staff Profile: User Details: Administer" - click into it.
• Then, down the left hand side you will have 'Overview' selected. Go down to the permission's 'Users' instead. Review if those people actually need this permission group.
• Repeat steps for the 'School: General Admin: Administer' permission.
• After review, consider amending some of your business roles to remove this permission from the role.

'School: General Admin: Administer' is usually the problem - for us it was assigned to everyone from the headteacher down to admin assistants, and if you look at the overview for a rundown of what the permission is for, it may be that not everyone needs it.

 

[paulkerton]

We've gone SSO with Arbor, but the login screen and this button is still available. I am connected (as we're a MAT) to each of our schools systems...

I'd really like Arbor to have a button so we can at least hide the "login with your email" section, so I don't end up with 27,000 emails with the title "Request for authentication app setup revoke in Arbor" I've had in the last 3 weeks 😭

I've just had to set up a rule to delete them automatically now.

Edited September 19, 2025 by paulkerton

[timbo343]

Sounds like we might need to recreate our own groups with the same permissions to see what happens. I have a feeling it's something that is coded behind what we can see / config.

[Sylv3r]

On 19/09/2025 at 16:07, paulkerton said:

We've gone SSO with Arbor, but the login screen and this button is still available. I am connected (as we're a MAT) to each of our schools systems...

I'd really like Arbor to have a button so we can at least hide the "login with your email" section, so I don't end up with 27,000 emails with the title "Request for authentication app setup revoke in Arbor" I've had in the last 3 weeks 😭

I've just had to set up a rule to delete them automatically now.

We've been asking for the ability to hide / remove the standard username / password options for at least 2 - 3 years. Not sure why they insist on leaving it in place and at least not giving the schools to opt-out if they wish.

[mullet_man]

Hi @timbo343 I just created an Exchange rule that stopped the emails hitting the users inboxes. 

[mullet_man]

7 minutes ago, Sylv3r said:

We've been asking for the ability to hide / remove the standard username / password options for at least 2 - 3 years. Not sure why they insist on leaving it in place and at least not giving the schools to opt-out if they wish.

 

This would be great, along with allowing Microsoft logins for students.

[Sylv3r]

Whilst we are on - the ability to see which students are logging onto the Student App too 🤞

[mullet_man]

1 minute ago, Sylv3r said:

Whilst we are on - the ability to see which students are logging onto the Student App too 🤞

Yes that would be good! One app instead of two would be good, the amount of students we have who download the parent app.

[kglwolves]

I also set up a rule in exchange to forward all these to our helpdesk. Thought it would be easier than trying to work with the permissions.