Contents

Problems With Two-factor in High School Environments

Email Addresses no Longer Supported for Authentication

Supported Two-Factor Methods

Two-Factor Exemptions for CCAP School Campus Networks

Supported Two-Factor Methods

Students Still Required to Register a Two-Factor Method

Automatic Import of MFA Info for Recent Applicants

Options for Two-factor Authentication on CCAP School Campus Networks

Further Reference

Problems With Two-factor in High School Environments

High school students who are participating in our dual-enrollment programs at Coalinga College and Lemoore College will often have problems completing two-factor authentication when logging onto their WHCCD accounts from their High School Campuses.

Factors involved include:

• Students not having phones
• Students being prohibited from using their phones while on campus or in class
• Lack of mobile phone signals inside their school buildings
• Students having their parents phone number set as their OTP method(s)

Email Addresses no Longer Supported for Authentication

WHCCD has recently migrated to Microsoft's Entra ID as the two-factor provider for both Coalinga College and Lemoore College. Prior to WHCCD's migration to Entra, dual-enrollment students were advised to use their school-issued email account for two-factor authentication. Entra ID does not support email as a two-factor method, so students will need to register a supported method.

Supported Two-Factor Methods

The following two-factor methods are supported by Entra ID:

Two-Factor Exemptions for CCAP School Campus Networks

To lessen the burden of two-factor authentication requirements, dual-enrollment students will not be required to use MFA when signing in from their CCAP school campus networks*. Dual-Enrollment students will still be required to perform two-factor authentication when attempting to log on from other networks.

* Partner schools who want their dual-enrollment students to be exempted will need to reach out to their Coalinga College or Lemoore College contact for more information.
 

Students Still Required to Register a Two-Factor Method

Though students can be exempted from two-factor requirements while logging on from their school's network, they cannot be exempted from the requirement to register a two-factor method.  Starting in January of 2026, dual-enrollment students will be required to register a two-factor method before they are allowed to log in to their WHCCD account. Students can do this ahead of time by visiting the My Account page at Microsoft to register their two-factor method. See this article for more guidance.

Automatic Import of MFA Info for Recent Applicants

Starting on 9/30/2025, dual-enrollment students who applied to WHCCD have had the phone number on their application automatically imported into their account. While this satisfies the MFA enrollment requirement, students should still make sure that the number that was imported can be used for two-factor authentication.

Options for Two-factor Authentication on CCAP School Campus Networks

In the case where a school's network is not exempt from two-factor authentication, the following are possible options for two-factor authentication:

• TOTP ("Authenticator") Apps

  • While the most common examples of TOTP apps are the Microsoft Authenticator and Google Authenticator apps, TOTP apps are not limited to mobile devices. There are also browser extensions and standalone applications for Windows, Apple and Chromebook devices that can serve as TOTP apps. For schools where students are issued a dedicated device, IT administrators may want to consider deploying a TOTP app to their devices for students to use.

• Phone (SMS/Voice)

  • Schools that have no phone policies may want to consider making exemptions for dual-enrollment students during the times that they need to log into their WHCCD account.

• Hardware Tokens (TOTP)

  • Hardware tokens should only be used as a last resort when other methods are not possible due to school policy, device restrictions, or lack of internet or phone access.

  • The usage of hardware tokens requires coordination with WHCCD. If you want to use hardware tokens, please reach out to your contact at Coalinga College or Lemoore College.

Further Reference

See the following articles on account management at WHCCD:

Student Account Activation – West Hills Answers

Managing Two-Factor Authentication Methods for your WHCCD Account – West Hills Answers

How to Reset Your Password – West Hills Answers

How to Change Your Password – West Hills Answers