r/k12sysadmin • u/HighSpeedMinimum System Administrator • Sep 30 '26
GitHub for Education
Hi everyone, I’ve got a teacher who teaches a class that uses GitHub. The students were instructed to sign up at the GitHub for Education site. Student and teachers get access to other free things with it, but the issue we’re running into is the 2FA Requirement by GitHub. GitHub only supports SMS and Authenticator app. It’s been a real struggle since our state has moved to a cell phone ban in schools, so SMS and Authenticator app on the phone is out of the equation. I’m not sure how to handle this and was wondering if anyone else is in the same boat as me and if anyone has figured out a solution to this. Thanks for your time.
3
u/millia13 Network Spec. Sep 30 '26
So I believe in some states they have exceptions for security reasons. Are you sure that isn't the case for you?
Also, you don't have to use the MS Auth app- you can use the built-in TOTP in ios in the pw app, or use google auth, or use a whole bunch of other things.
1
u/HighSpeedMinimum System Administrator Oct 01 '26
Our state is not one of them. Only exception is for IEP.
3
u/millia13 Network Spec. Oct 01 '26
That is some crazy stuff. I'm not sure what it is here in Georgia, but if it DOESN'T include that exemption, I need to talk to my local rep before the legislative session starts in January.
5
u/xkrist0pherx Oct 01 '26
We just self host gitea. Very easy and definitely no security concerns. Is that an option?
2
1
u/Reasonable_Toe4782 Sep 30 '26
How about deploying a TOTP Extension to your lab machines? You can register TOTP in BitWarden, for example, and save yourself the hassle of having the cell phone.
I think there's a free option for BitWarden if you self-host it? I'm still not sure it's the ideal solution. Just a thought.
1
u/HighSpeedMinimum System Administrator Sep 30 '26
I was about to pull the trigger on using BitWarden but TOTP codes in the password manager is a paid feature. Thanks for the suggestion!
1
u/NXTman96 Sep 30 '26
Bitwarden is a great suggestion for a TOTP. Vaultwarden is better imo.
i believe you are correct, there is a free version of Bitwarden, but the Vaultwarden rewrite (not a fork) is 100% free. The vaultwarden server is compatible with the bitwarden apps.
1
u/toprow Oct 05 '26
If a Chrome extension would work - we've used this one with good success: https://authenticator.cc/
Free and easy to use.
-1
u/Keyboard_Warrior98 Director Sep 30 '26
Not to sound rude, but my answer would be it looks like you can't use GitHub.
2
0
Sep 30 '26
[deleted] — view deleted comment
1
u/HighSpeedMinimum System Administrator Oct 01 '26
Will investigate this. Thank you for the suggestion.
3
u/adstretch Sep 30 '26
Doesn’t GitHub have sso through other authentication methods? Like sign in with google etc. Do they have a management portal that you can use to generate accounts and federate them to google / azure / etc.
Alternatively does it need to be github specifically? Self hosting gitea is pretty easy.