Maintained for Historical Purposes

This resource is being maintained for historical purposes only and is not currently applicable.

(General) Subject: TFA Information - Token Distribution and E-mails for Schools in Groups 4 and 5

Posted Date:June 6, 2012

Author: Pamela Eliadis, Service Director, System Operations & Aid Delivery Management, Federal Student Aid

Subject: TFA Information - Token Distribution and E-mails for Schools in Groups 4 and 5

As explained in a January 13, 2012 Electronic Announcement on the Information for Financial Aid Professionals (IFAP) Web site, we are implementing a number of technology security initiatives in calendar year 2012. One of the initiatives is a security process called Two Factor Authentication (TFA). Through TFA, when logging in to certain Federal Student Aid systems, an authorized user will be required to use a traditional User ID and Password as well as provide a One-Time Password (OTP). The OTP will be generated by a registered token device that is in the physical possession of the user.

In the earlier announcement, we explained that we will begin a phased distribution of tokens and token information to schools. Working with Primary Destination Point Administrators (PDPAs) and Common Origination and Disbursement (COD) Security Administrators, we will distribute the tokens to one group of schools at a time. Each group will be comprised of the schools located in a particular set of states.

In June 2012, we plan to begin distributing e-mails and tokens to the next two groups of schools, which will include schools located in the following states:

    • Alaska
    • North Dakota
    • California
    • Oklahoma
    • Florida
    • Oregon
    • Idaho
    • South Dakota
    • Minnesota
    • Texas

As a reminder, we will communicate via e-mail directly with the PDPA and/or COD Security Administrator at each school in the states listed above. Individual users will receive tokens and additional token information via their PDPA or COD Security Administrator.

Once a school has received tokens, individual users will be required to use the tokens to access our Federal Student Aid systems in approximately 45 days after receipt. We will provide notice of the date tokens will be required in the e-mail communications sent to the PDPA and/or COD Security Administrator.

Note: For schools that have additional locations or campuses in multiple states, we will work with the PDPA or COD Security Administrator at the corporate office or main campus location. For example:

    • ABC University’s main campus is located in Florida. It has additional locations in Georgia. ABC University will be included with Groups 4 and 5, and its PDPA or COD Security Administrator will distribute tokens to its locations in Florida and Georgia.
    • DEF College’s corporate office is located in Illinois. It has additional locations in Florida. DEF College will not be included with Groups 4 and 5, and its locations in Florida will not receive tokens until the schools located in Illinois are scheduled for token distribution.

Contact Information

We appreciate your cooperation in providing safe and secure access to Federal Student Aid systems and look forward to working with the school community to implement TFA.

If you have questions about TFA or the information in this communication, contact us at TFA_Communications@ed.gov (TFA_Communications@ed.gov).