Skip to main content
Some source systems require multi-factor authentication (MFA) for the account used by an integration. MFA is a provider requirement, not a universal K16 integration setting.
Never paste an authenticator secret, upload an MFA QR code, or send a one-time code in a support message. These values can grant access to the provider account.

​
Setting Up Your Integration for MFA

Before you being, you will want to
  • Login to Scaffold and navigate to edit mode of the integration you are adding MFA support to.
  • In another tab, Login to the system (e.g. Canvas) with the account configured in the integration
  • Open your authenticator app that is used by your institution.

​
Instructions

  1. Within your system (e.g. Canvas), navigate to the MFA set up page
    • If MFA has not been set up for the account yet, you will be redirected to the page when you login.
  2. On the system’s MFA Set Up page, Copy the Secret Key (or take a screenshot of the QR Code)
  3. Paste the Secret Key (or upload the QR Code) into the TOTP Secret field found within your integration in Scaffold.
  4. Open up your authenticator app and scan the QR code provided from your system (e.g. Canvas)
    • This will allow you to access the MFA code if you need to login to the system with that account.
  5. The MFA code in the Integration and Authentication App should match.
  6. Enter the MFA code into the verification code in your system’s (e.g. Canvas) MFA set up page.
  7. In your system, click Save/Verify
  8. In the integration, click Save.

​
FAQ

What if I already have MFA enabled and set up for the system (e.g. Canvas) account? If you previously had MFA set up for the system account, you will need to reset the MFA for the set up. In Canvas, you can do this by navigating to Account>Settings>Reconfigure Multi-Factor Authentication. What if I have 2 integrations for the same system (e.g. Canvas)?
  • Set up the main integration that is used to work with MFA, once MFA has been configured successfully you can then duplicate the integration.
  • Copy the Secret Key that was provided from Canvas and re-enter the same Secret Key into each of the integrations.

​
Troubleshoot safely

  • Record the provider, integration friendly name, time, and displayed error.
  • Use Copy diagnostics only after reviewing the output for sensitive organizational data.
  • Share error text, not authentication material.
  • Revalidate after the provider administrator corrects account policy or scope.
See Status and lifecycle for validation states.
Last modified on November 6, 2026