Two-Factor (2FA) Authentication

CrossConnect requires Two-Factor Authentication (2FA)

Who: All CrossConnect (xConnect) users 

How: Users will authenticate using an authenticator app of their choice (see below for options)

Which Environments: Both PROD and BETA 

How to Set-Up: See the PDF Instructions (at bottom of article)

Frequently Asked Questions (FAQs):

Which authenticator apps can I use?

You can use any authenticator app that can authenticate your identity. These are the ones tested by the tech team and CFNC: 

1) Use an authenticator app on your phone or tablet

The two listed in CrossConnect as recommendations are Microsoft Authenticator and Google Authenticator. I have also used Duo with success. 

2) Use a Browser Extension (MY PREFERENCE!)

You can set up an Authenticator Browser Extension to whichever browser you use, and you’ll be able to add your CrossConnect account to those. 

Once the browser extension is set up, review these instructions to help authenticate the  CrossConnect 2FA.

3) Use a Password Manager

I've successfully added the 2FA to my 1Password Password Manager. 

How do I use 2FA if I use a shared/office account?

If you have two or more people who use the same login account (for example, residency), then you can set up the 2FA on each person's device. The code will be the same on all devices. Here's how you would set that up. 

In this example, Person A has the 2FA set up already and Person B needs to set it up on their device with the same login.

• Option 1: Person A logs in as usual. Person A will go to the screen to "+ Add Authenticator App." Person B will be in the same room and add the QR code to their device. 
• Option 2: Person B logs in to CrossConnect. On the screen that asks for the 2FA code, Person A tells Person B the code. Then Person B will go to the screen to "+ Add Authenticator App." Person B will add the authenticator to their own device.

Do I need to do 2FA whenever CrossRoute runs?

You will not need to use 2FA to run CrossRoute schedules from the CrossRoute Service Manager. 

Do I need to do 2FA with the API?

You will not need to use 2FA with the API

What do I need to do to remove the 2FA?

• 2FA is mandatory for all active xConnect accounts, so it is not possible to disable requirement of 2FA
• If you no longer are an active account or a member of an active account, you should remove the 2FA Authentication from your authenticator app.

What does "Reset Authentication Key" mean? 

• Reset Authentication Key will remove all currently connected/authorized apps from your account. 
• If the Authentication Key is reset, you will be prompted to authorize your app when you next log in to CrossConnect. 

What if I get a new device?

If you need to set up 2FA with a new device (and you do not have access to the old device), please email cfnc-campus@northcarolina.edu and indicate that you need to Reset Authentication Key

Last Updated 1/28/2026.