We are a UK school and have banned mobile devices in school. Any ideas how we rollout 2FA for pupils accounts with a mobile device? They have a laptop which could be Apple, Windows or ChromeBook
You could use physical 2FA devices, like Google’s Titan Security Keys (https://store.google.com/us/product/titan_security_key) or similar products from someone like YubiKey instead of depending on their mobile…
@icrew's got a great idea but two ideas to consider that might be lower cost are #1 print backup codes for the students, or #2 use the Employee ID challenge: https://support.google.com/a/answer/9022736?hl=en
TL;DR: Use the student ID + username + password and you have multiple factors to login.
-KAM