jjenkins

so are you creating parents accounts in AD?

the example, that our LA stated, was if the student found his/her parents username and password, the student would be able to logon and view their records. If the parent had the fob on their keyring, they would not be able to do this, there is an agrument, that they could also obtain the fob as well.

So with ePortal how do you turn-on two-factor for staff and none for parents?

We already have Serco's ePortal in school, secure web published via ISA 2k6, with secure SSL certificate. Our local authority are requesting that we use Two-Factor authentication rather than just the Serco username and password to provide Parental Access for Autumn 2010 Implementation. Due to rules with our local authority, that now connect to Government Connect (GSX network), they have recommended and stipulated that we use Two-Factor authentication. It's possible that they'll provide the funding, so cost may not be a factor here. (yes, we know that could mean a big bill for the authority, if all 1900 parents, get an RSA SecureID fob in the mail, renewalable every three-five years). What are other schools doing?, as far as security and authentication, two factor authentication is concerned, and how to integrate into ePortal with ISA 2k6?