Illinois Association of Student Financial Aid Administrators News

Coming Soon: Two-Factor Authentication for GAP Access

Coming Soon:
Two-Factor Authentication
for GAP Access

The content of this message may also be viewed online at ISAC's website.

After the first of the year, ISAC is improving the security of the Gift Assistance Programs (GAP) Access portal with the implementation of two-factor authentication. This latest step in our ongoing efforts to ensure the safety of shared data provides an additional level of security when logging into GAP Access by using:
  1. the GAP Access User ID and password and
  2. a single-use verification code obtained through an application (unique code generated for each log in).
Once implemented, the two-step process (a new unique code) will be required every time a user logs into GAP Access, and will be required for both School User and Administrator accounts. The previous 2-step authentication process that used challenge questions and answers will be discontinued at the time of setup for the new process. Setup screens are anticipated to be available in GAP Access beginning in mid-January.

Preparing for Two-Factor Authentication

Financial aid office staff are encouraged to start preparing now for the implementation of two-factor authentication by identifying the device (e.g., cell phone, tablet, or other compatible device) onto which one of three applications will be downloaded, and also determining which of those three applications best meets the needs of the office. Only one of the following available applications is necessary:
  • Google Authenticator
  • Microsoft Authenticator
  • Authy Authenticator
All applications are free and can be downloaded from either the Google Play Store or the Apple Store, will accommodate multiple users and are compatible with multiple devices. ISAC does not endorse or recommend one product over another. Contact your institution's IT staff for assistance in selecting an authenticator, as well as for technical support when downloading and using an application.


Here is a high-level overview of implementation of the two-factor authentication process:
  • Identify device to be used for authentication application
  • Choose one of three available applications
  • Download application onto device
  • Add GAP Access account to authenticator
  • Log in to GAP Access using six-digit verification code displayed on authentication application
Once the setup screens are available, a Two-Factor Authentication User Guide, for reference while setting up, will be posted in the GAP Access User Guides section of the website.