Hi
We have a primary school who's student users are plagued by 'login challenges' when trying to log in to Google Classroom. These login challenges look on the face of it like 2FA prompts as they often (but not always) ask for a mobile phone number which they send a code to, but unlike 2FA you can enter any mobile phone number as it seems the challenge is just to determine that you are a real person with a mobile phone, and perhaps create an audit trail of who who has accessed the account. It's possible to disable login challenges for a particular user for 10 minutes via the admin centre, but it is not possible to disable them entirely. It is obviously not viable to request that primary aged students use a mobile phone to log in to Google Classroom, and I've not seen this issue at any other schools. There was a password breach at the school in question, but all the passwords were changed and student accounts deleted and re-created since then. Looking at the audit logs I can't see any more attempts to log on from the other side of the world since that was identified and resolved - though I would not 100% trust that I have interrogated the logs in exactly the right way. This is the only thing I can think of that would make this school subject to this problem when others are not. The problem did go away for a while after the accounts were deleted and re-created, but now it has returned.
Most recently a child has received the slightly different login challenge message of:
Which does not allow them to log in at all, and while I have tried following the step to temporarily disable login challenge and log them in, the problem returns again after the 10 minutes is up.
Does anyone have any experience of this, or suggestions of what we could try?