NCEdCloud: North Carolina’s Education Cloud Login and IAM Service Explained

admin
47 Min Read

North Carolina public schools run on a lot of technology. From attendance tracking in PowerSchool to reading programs in Amplify, every tool a student, teacher, or staff member touches in a school day depends on having working credentials. NCEdCloud is the system that ties all of that together.

Contents
What Is NCEdCloud?NCEdCloud Defined: North Carolina’s Identity and Access Management ServiceWho Uses NCEdCloud Across North Carolina SchoolsNCEdCloud Login: How to Access my.ncedcloud.orgStep-by-Step: How to Log In to NCEdCloudWhat Is Your NCEdCloud Username and Where to Find ItNCEdCloud Login for Students in Every GradeNCEdCloud Login for Teachers and StaffHow to Bookmark the NCEdCloud Applications Page the Right WayClaim My NCEdCloud AccountWho Needs to Claim an Account in NCEdCloudHow to Claim Your NCEdCloud Account: Full Step-by-Step for New EmployeesWhat to Do When the Next Button Stays Grayed Out During ClaimingHow Grades 6-12 Students Claim Their NCEdCloud AccountsWhy K-5 Students Cannot Claim Their Own NCEdCloud AccountsWhat Information You Need to Claim Your AccountNCEdCloud Password HelpNCEdCloud Password RequirementsHow to Reset a Forgotten NCEdCloud Password Using Self-ServiceHow to Change an Expired NCEdCloud PasswordWho Can Reset Passwords in NCEdCloud Based on RoleCan NCEdCloud Passwords Be Reused?How Student Default Passwords Work and How to Regenerate ThemNCEdCloud Not Working? Troubleshooting Common IssuesWhy NCEdCloud Is Not Working: Top Causes to Check FirstWhy You Get “The Request Is Invalid” Error on NCEdCloud“Internal Error: No Login Context Available” in NCEdCloudNCEdCloud Error 503 and “Unable to Handle the Request”Why PowerSchool Is Not Showing on NCEdCloudIs NCEdCloud Down Right Now? How to CheckWhy SSO Stops Working When You Open NCEdCloud in Private ModeNCEdCloud for StudentsNCEdCloud Login for PK-5 Students: Badges and Pictograph AuthenticationHow to Find a Student’s NCEdCloud UsernameWhat Happens to Student NCEdCloud Accounts at the Start of a New School YearNCEdCloud for TeachersHow Teachers Use NCEdCloud Beyond Their Own LoginHow to Reset a Student Password as a Teacher in NCEdCloudHow to Distribute NCEdCloud Credentials to K-5 StudentsNCEdCloud for LEA AdministratorsPrivileged Roles in NCEdCloud and What Each One CoversHow to Submit Workflow Requests in the NCEdCloud RapidIdentity Portal in 2025-26How to Enable Multi-Factor Authentication by School CodeHow to Regenerate Default Student Passwords for Your Entire PSUNCEdCloud Applications: What You Can Access Through the PortalHome Base Applications Available Through NCEdCloud SSOTarget Applications: Optional Integrations Districts Can Add to NCEdCloudAmplify Icon: How to Add Grades 5 and 6 to Your PSUClassLink Seamless Login Integration with NCEdCloudNCEdCloud Single Sign-On ExplainedHow SSO Works Inside the NCEdCloud IAM ServiceWhy NCEdCloud SSO Is Mandatory for Home Base Since 2015NCEdCloud Multi-Factor AuthenticationWho Must Use MFA in NCEdCloudHow to Set Up a One-Time Password for NCEdCloud MFANCEdCloud Account Settings and Profile ManagementHow Email Addresses Work in NCEdCloud AccountsSetting a Preferred Email Address When You Have MultipleChallenge Response Security Questions: How They WorkNCEdCloud for Charter SchoolsHow Charter Schools Participate in NCEdCloudCharter School Source Data RequirementsFrequently Asked QuestionsWhat is NCEdCloud?What is my.ncedcloud.org?What is the difference between NCEdCloud and PowerSchool?How do I find my NCEdCloud username?How do I reset my NCEdCloud password?Is NCEdCloud down right now?Can students use NCEdCloud on a Chromebook or phone?Why does NCEdCloud ask me to log in again when switching applications?What does “Internal Error: No login context available” mean in NCEdCloud?Can parents access NCEdCloud?NCEdCloud Training and Support ResourcesTraining Videos and Documentation at docs.ncedcloud.orgAsk the Experts Webinars for LEA AdministratorsWho to Contact When NCEdCloud Issues Cannot Be Resolved at the School Level?

If you have ever seen the login screen at my.ncedcloud.org and wondered exactly what it is, who manages it, and why it exists, this guide covers all of it. It also walks through every problem users commonly hit, from forgotten passwords to error messages that make no sense, so you can get back to work without waiting on a help desk ticket.

One thing worth knowing before diving in: as of the 2025-26 school year, several administrative processes moved out of web forms on ncedcloud.mcnc.org and into workflow requests inside the RapidIdentity Portal itself. If you are an LEA Administrator and your usual forms have disappeared, that is why. The rest of this guide explains what changed and where to find everything now.

What Is NCEdCloud?

NCEdCloud Defined: North Carolina’s Identity and Access Management Service

NCEdCloud stands for North Carolina Education Cloud. It is the state’s official Identity and Access Management (IAM) service for K-12 public education. The platform gives every student, teacher, and staff member in a public school district or charter school one set of login credentials that works across every connected application.

The technology behind it is built on the RapidIdentity platform, developed by Identity Automation and operated by MCNC, a nonprofit technology organization that supports North Carolina’s education and research communities. NC DPI provides the policy framework and oversight. The result is a federated system where one login at my.ncedcloud.org opens the door to PowerSchool, Amplify, Destiny Library Manager, Home Base, and dozens of other tools without requiring separate passwords for each.

Who Uses NCEdCloud Across North Carolina Schools

The platform serves four distinct groups, and each one interacts with it differently:

  • Students from Pre-K through grade 12, with login methods that vary by grade level
  • Teachers and certified staff who access Home Base, PowerSchool, and curriculum tools through the portal
  • Non-certified employees, administrators, and new hires who go through the account claiming process before their first login
  • LEA administrators, data managers, and help desk staff who manage accounts, assign roles, reset passwords, and configure access across entire districts

Who Operates NCEdCloud: MCNC and NC DPI

MCNC handles the technical infrastructure and day-to-day operations. NC DPI sets the policy requirements and coordinates with school units across the state. Identity Automation, the vendor behind RapidIdentity, provides software support and training. Charter schools and local education agencies interact with the system directly, while MCNC maintains the backend. When something goes wrong at the infrastructure level, it is MCNC and Identity Automation handling the fix, not individual schools.

NCEdCloud Login: How to Access my.ncedcloud.org

Step-by-Step: How to Log In to NCEdCloud

The login process is simple once you know the one rule that trips most people up: never bookmark the login screen. Bookmark the Applications page that appears after you sign in. Here is the full process:

  • Open any modern browser and type my.ncedcloud.org directly into the address bar
  • Enter your username, which is your State UID number for staff or your Pupil Number for students
  • Click Go and enter your password on the next screen that appears
  • Click Go again to reach your Applications dashboard where all your tool icons are displayed
  • If your role requires Multi-Factor Authentication, enter the one-time password from your authenticator app when prompted

That Applications page is what you want bookmarked. When you click a bookmarked Applications page later, the system routes you through the login screen and lands you right back at your tools. Bookmarking the login URL itself causes the system to lose track of where to send you after authentication, which triggers the “The request is invalid” error.

What Is Your NCEdCloud Username and Where to Find It

For students, the username is the Pupil Number, sometimes displayed as Student Number on school records. For teachers and staff, it is the 10-digit State Employee UID, which appears in the Staff UID system and in payroll records. If you do not know yours, your school’s Finance or HR department can locate it. Any staff member holding a Help Desk role in NCEdCloud can also look it up through the portal.

If your district has opted into the Alias ID feature, you may also be able to use your school email address as your username at login. This is not the default setup statewide. It has to be enabled by your LEA Administrator before it works.

NCEdCloud Login for Students in Every Grade

Login works differently depending on grade level, and the system is built around what is actually realistic for each age group:

  • Pre-K through grade 5: No account claiming process exists for this group. Teachers distribute usernames and default passwords directly, or schools use NCEdCloud Badges (printable QR code cards) or pictograph authentication. Young students tap a card or identify a sequence of images rather than typing anything.
  • Grades 6 through 12: Students may claim their own accounts using their Pupil Number, grade level, date of birth in YYYYMMDD format, and their school’s three-digit LEA code. After submitting that information, they set a password and answer five security challenge questions.
  • All grades: Once past the login screen, every student lands on the same Applications dashboard as staff, showing the specific tools their grade and school have available.

NCEdCloud Login for Teachers and Staff

New employees must claim their accounts before logging in for the first time. The process requires your 10-digit Staff UID, your LEA code, and your birthdate in YYYYMMDD format (no slashes, no dashes). After submitting those details, you set a password and answer challenge questions. Once claimed, you can access all Home Base applications and any other tools your district has connected to the portal through your Applications dashboard.

How to Bookmark the NCEdCloud Applications Page the Right Way

After you log in and see your Applications dashboard with all your tool icons, that is the page to bookmark. The URL at that point is the correct one to save. Bookmarking the login page (where you type your username) will break future access because the system does not know where to take you after authentication if you start from the raw login URL. This is the single most common source of “The request is invalid” errors across North Carolina schools.

Claim My NCEdCloud Account

Who Needs to Claim an Account in NCEdCloud

Account claiming applies to any new user who has been added to the system through source data but has not yet set their own password and security questions. This covers new employees at every level, from first-year teachers to central office staff to support personnel. It also optionally applies to students in grades 6 through 12, depending on what the district decides. K-5 students never go through claiming at all.

How to Claim Your NCEdCloud Account: Full Step-by-Step for New Employees

  • Go to my.ncedcloud.org and click the Claim My Account button in the middle of the login screen
  • The form defaults to LEA Employee Claim Policy. Keep that selected and click Next
  • On the Employee Claim Form, enter your 10-digit Staff UID, your three-digit LEA code, and your date of birth formatted as YYYYMMDD with no slashes or dashes
  • Check the reCAPTCHA box and click Next
  • Set a new password that meets all policy requirements
  • Answer at least 5 of the 10 security challenge questions presented
  • Your account is now active and you can log in at my.ncedcloud.org

An Employee Claim My Account video walkthrough is available at docs.ncedcloud.org if you want to follow along visually before starting the process.

What to Do When the Next Button Stays Grayed Out During Claiming

A grayed-out Next button almost always means one of two problems. Either something was entered in the wrong format, which is most often the birthdate (it must be YYYYMMDD with zero separators), or the information you entered does not match what is in the source system. Double-check your LEA code, Staff UID, and birthdate format. If it still does not work, the data in PowerSchool or HR may be incorrect. Contact your school’s technology support staff or someone with an LEA Administrator role who can verify your source record.

How Grades 6-12 Students Claim Their NCEdCloud Accounts

Secondary students who are instructed to claim their own accounts need four pieces of information: their Pupil Number, their current grade level, their date of birth in YYYYMMDD format, and their school’s LEA code. On the claim screen, they need to switch from the default Employee form to the Student Claim Form. After submitting the form, they set a password and answer at least five challenge questions. Teachers can walk students through this process using the Student Claim My Account video at docs.ncedcloud.org.

Why K-5 Students Cannot Claim Their Own NCEdCloud Accounts

Students in kindergarten through fifth grade have no claim account process at all. Their accounts are created automatically from nightly source data, and their credentials are managed entirely by teachers and administrators. Teachers can view each student’s Pupil Number and default password in the My Students view inside the portal, then share those credentials directly with students. Districts that want to make login even easier for young learners can use NCEdCloud Badges, which are printed QR code cards, or pictograph authentication, which lets students tap an image sequence instead of typing any text.

What Information You Need to Claim Your Account

Staff need: 10-digit State Employee UID, 3-digit LEA code, date of birth in YYYYMMDD format. Students (grades 6-12) need: Pupil Number, current grade, date of birth in YYYYMMDD format, 3-digit LEA code. Neither group should use dashes, slashes, or any separators in the date field. That formatting detail is responsible for a large share of failed claim attempts.

NCEdCloud Password Help

NCEdCloud Password Requirements

Every password in the NCEdCloud IAM service must follow these rules before the system will accept it:

  • Between 8 and 16 characters long
  • Must include at least one uppercase letter, one lowercase letter, and one number
  • Cannot contain your username, first name, last name, or any spaces
  • Cannot start or end with an exclamation point
  • Cannot match any of your last 24 passwords
  • Must be changed at least every 90 days for staff (student expiration is optional and set by the LEA)

Allowed special characters include: @ # $ % ^ & and several others. The password setup screen will show a red “Does Not Meet Requirements” message until all criteria are satisfied, then turn green when the password qualifies.

How to Reset a Forgotten NCEdCloud Password Using Self-Service

  • Go to my.ncedcloud.org
  • Click Password Reset on the login screen
  • Type your username and complete the reCAPTCHA
  • Answer two of the challenge questions you set during account claiming
  • Set a new password that meets all requirements
  • Return to my.ncedcloud.org and log in normally

If the self-service reset does not work because you skipped challenge questions during claiming, contact your school’s technology support staff or any person with an LEA Help Desk role in NCEdCloud. They can reset your password from their side.

How to Change an Expired NCEdCloud Password

When a staff password expires, the login screen shows a red error message after you click Go. The system then redirects you to the Change Password screen automatically. Enter your current expired password in the first field, then type and confirm a new one that meets all policy requirements. The message will turn green when the new password is acceptable. Click Change Password to finalize it.

If you see a red “Invalid Current Password” message at the end, it means you mistyped your old password in the first box. Re-enter it carefully and try again.

NCEdCloud starts warning you 10 days before expiration. A pop-up appears every time you log in during that window asking you to update your password. If you miss the window, the process above still works; you just have to go through the expired password screen rather than the standard change password flow.

Who Can Reset Passwords in NCEdCloud Based on Role

  • Students can reset their own passwords using the self-service tool at my.ncedcloud.org
  • Teachers can reset passwords for any student listed under their My Students view in the People section
  • LEA Administrators and Help Desk role holders can reset passwords for any user in the entire district
  • School Help Desk staff can reset passwords only for users within their assigned school
  • Student Help Desk roles can access student accounts only, not staff records
  • Staff with a Student Help Desk role cannot reset employee passwords under any circumstances

Can NCEdCloud Passwords Be Reused?

No. The system tracks your last 24 passwords and will reject any that match a previous one. This follows North Carolina’s state DIT policy on password reuse. If you cycle through passwords and try to return to an older one, the system will block it until it is at least 25 password changes removed from your current one.

How Student Default Passwords Work and How to Regenerate Them

Every new student account gets a randomly generated default password when it is created from source data. For K-5 students, this is what teachers distribute. For secondary students who claim their accounts, this default is replaced by the password they choose.

LEA Administrators can regenerate default passwords for students at the PSU level, by school, or by grade. This is commonly done before each school year starts. The workflow inside the RapidIdentity Portal can also push the new default as the active login password and force students to change it at their next sign-in.

NCEdCloud Not Working? Troubleshooting Common Issues

Why NCEdCloud Is Not Working: Top Causes to Check First

Before contacting your school’s help desk, run through these common causes, as most NCEdCloud login failures come from one of them:

  • Expired password: Staff passwords expire every 90 days. If you have not logged in recently, this is the most likely cause.
  • Wrong username format: Staff need a 10-digit State UID. Students need their Pupil Number. Email addresses only work if your PSU has enabled Alias IDs.
  • Bookmarked login screen: Clicking a saved bookmark to the login URL rather than the Applications page causes a redirect error.
  • Incognito or private mode: Browsers in private mode block the session cookies that SSO relies on. Use standard mode instead.
  • Wrong URL: Always use my.ncedcloud.org. Do not use any third-party or lookalike URLs.
  • Browser cache issues: Clearing your browser cache and cookies can resolve login loops that persist after other fixes.

Why You Get “The Request Is Invalid” Error on NCEdCloud

This error appears when the system does not know where to send you after you authenticate. It happens when you bookmark the raw login URL rather than the Applications page, or when you use the browser back button to return to the login screen after a session ends. The fix is to open a fresh browser tab and navigate directly to my.ncedcloud.org from the address bar, then log in normally and bookmark the Applications page once you land there.

“Internal Error: No Login Context Available” in NCEdCloud

This specific error message shows up in real user reports and comes from the same root cause as the invalid request error. The system loses its session context, usually because you tried to log in from a bookmarked login page or a stale link. Open a new tab, go directly to my.ncedcloud.org, and log in fresh. If it persists, clear your browser cookies for the ncedcloud.org domain and try again.

NCEdCloud Error 503 and “Unable to Handle the Request”

An error 503 message or an “unable to handle the request” response from the RapidIdentity portal means the server is temporarily overloaded or unavailable. This is an infrastructure issue rather than an account issue. Check status.ncedcloud.org to see if there is an active incident. Historical data shows these episodes are typically brief, ranging from 14 to 56 minutes before resolution. If the status page shows all systems operational but you still see a 503, wait a few minutes and try again, as brief load spikes can produce these errors without generating an official incident report.

Why PowerSchool Is Not Showing on NCEdCloud

If the PowerSchool icon is missing from your Applications dashboard:

  • Your PSU may not have enabled the PowerSchool icon for your specific role type
  • Your account may be missing a valid email address in the source system, which some applications require
  • Your UID in NCEdCloud may not be matching the SIF_StatePrid field in PowerSchool correctly (for staff) or the state_studentnumber field (for students)
  • There may be a data sync issue between PowerSchool and NCEdCloud that occurred in the most recent nightly feed

Contact your LEA Administrator to verify that your account is provisioned correctly and that your source data record contains all required fields including email address.

Is NCEdCloud Down Right Now? How to Check

Go to status.ncedcloud.org for real-time system health information. This is the official status page maintained by MCNC and covers the Primary Data Center and Source File Processing components separately. The platform shows four status levels: up, warning, down, and maintenance.

Based on recent monitoring data, NCEdCloud experiences brief warning-level incidents multiple times per month, typically lasting between 10 and 40 minutes. These rarely escalate to full outages. Most users do not notice warn-level incidents unless they happen to log in exactly during the affected window.

If the status page shows everything operational but you still cannot log in, the issue is almost certainly specific to your account, your browser, or your local network rather than the platform itself.

Why SSO Stops Working When You Open NCEdCloud in Private Mode

NCEdCloud’s Single Sign-On uses the SAML protocol, which relies on session cookies shared across browser tabs. Private or incognito mode blocks that cookie sharing. When you open PowerSchool, Amplify, or any other connected tool in a new private tab, the browser treats you as a completely new unauthenticated user. It has no memory of your NCEdCloud login from the other window. Always use a standard browser window for any NCEdCloud-connected application, and keep all your work in the same browser profile to maintain SSO across tabs.

NCEdCloud for Students

NCEdCloud student

NCEdCloud Login for PK-5 Students: Badges and Pictograph Authentication

Students in pre-kindergarten through grade 5 have three ways to access NCEdCloud, none of which require typing a username and password:

  • NCEdCloud Badges: Printed QR code cards that teachers create and distribute. Students scan the card to log in instantly.
  • Pictograph authentication: Students select a sequence of images rather than typing any text. The school sets up the sequence in advance.
  • Direct credential login: Teachers share the student’s Pupil Number and default password verbally or on a printed handout.

All three options are manageable from the My Students view in the portal. Teachers can see each student’s current credentials, reset passwords, and generate badge printouts without needing elevated admin access.

How to Find a Student’s NCEdCloud Username

The NCEdCloud username for any student is their Pupil Number, also called the Student Number and stored in PowerSchool as state_studentnumber. Teachers can see this for every student they currently teach by opening the My Students view in the People section of the portal. Anyone holding a Help Desk, LEA Administrator, or School Help Desk role can also look up individual usernames for any student in their access scope.

What Happens to Student NCEdCloud Accounts at the Start of a New School Year

At the beginning of each school year, student accounts are updated automatically through nightly data feeds from PowerSchool and other source systems. Grade levels update, new students are provisioned, and students who have left the district are deactivated. LEA Administrators typically regenerate student default passwords before school starts, either for the entire PSU or by grade. The regeneration workflow allows admins to push the new default as the active login password and force a password change at first login, which is a common practice for middle and high school students.

NCEdCloud for Teachers

How Teachers Use NCEdCloud Beyond Their Own Login

Teachers interact with NCEdCloud at two levels. First, they are regular users signing into their own Home Base applications, PowerSchool, and classroom tools through the portal. Second, they are account managers for their students. The My Students view inside the portal pulls course roster data from PowerSchool in real time, so teachers can see every student currently assigned to them, view their usernames and default passwords, reset their passwords, and print NCEdCloud Badges for K-5 learners.

This makes teachers the first line of support for student login issues during class. A student who cannot get into Amplify or Reading A-Z does not need to wait for the IT department. The teacher can reset the password from their own portal view in under a minute.

How to Reset a Student Password as a Teacher in NCEdCloud

Log into my.ncedcloud.org and go to the People section. Open the My Students view to see your current roster. Find the student whose password needs resetting, click into their profile, and use the password reset option. You can set a temporary password that the student knows or regenerate a new default. For very young students, you can also set it to something simpler to remember than the system-generated default.

How to Distribute NCEdCloud Credentials to K-5 Students

For students in kindergarten through fifth grade, the My Students view shows each student’s Pupil Number and current default password. Teachers can read these aloud, write them on a slip of paper, or print NCEdCloud Badge QR cards for an even faster login experience. Badge cards are especially useful for computer lab sessions where students need to log in quickly as a group.

NCEdCloud for LEA AdministratorsNCEdCloud

Privileged Roles in NCEdCloud and What Each One Covers

NCEdCloud uses a tiered permission system for staff who need access beyond a standard user account. Understanding which role covers which function prevents both over-provisioning and security gaps:

  • LEA Administrator: Full district-wide access including account management, target application requests, MFA setup, and workflow submissions in the RapidIdentity Portal. All privileged role requests require MFA to be set up before the role is approved.
  • LEA Data Auditor: Read-only access to account and profile data across the PSU. Cannot make changes.
  • LEA Help Desk: Can reset passwords and manage accounts for all users in the district, both staff and students.
  • School Help Desk: Same abilities as LEA Help Desk but scoped to a single school only.
  • Student Help Desk: Can access student accounts only. No access to staff records.
  • LEA Student Help Desk: District-wide access to student accounts only, not staff.

How to Submit Workflow Requests in the NCEdCloud RapidIdentity Portal in 2025-26

Starting with the 2025-26 school year, several processes that previously used web forms on ncedcloud.mcnc.org now live inside the RapidIdentity Portal as workflow requests. This affects requests for Target Application integrations, Amplify icon additions for grades 5 and 6, Studio rostering, ClassLink Seamless Login, and opting out of student badge authentication.

To access these workflows, log in at my.ncedcloud.org with an LEA Administrator account. Use the dropdown at the top of the portal and select Requests. Choose the appropriate workflow from the Catalog. Only staff with the LEA Administrator role can submit these requests. If you are used to finding these forms on the ncedcloud.mcnc.org website and they are no longer there, this is the change that removed them.

How to Enable Multi-Factor Authentication by School Code

NCEdCloud now supports enabling MFA at the school code level, which allows a PSU to roll it out gradually rather than enabling it for everyone at once. This is useful for districts phasing in MFA over a semester or school year without disrupting operations. The workflow is inside the Requests section of the RapidIdentity Portal. When MFA is enabled for a school code, all staff active under that code must complete MFA setup at their next login.

How to Regenerate Default Student Passwords for Your Entire PSU

The regeneration workflow lets LEA Administrators reset default passwords for students across the entire PSU, by school, or by grade. It can also push the new default as the active login password and force students to change it on first login. This workflow is now found in the RapidIdentity Portal’s Requests section rather than through a web form. Use it before school starts each year to ensure students are not walking in with credentials from the previous year.

NCEdCloud Applications: What You Can Access Through the Portal

Home Base Applications Available Through NCEdCloud SSO

Home Base is NC DPI’s suite of required statewide tools. All of them are accessible through a single NCEdCloud login. Once you authenticate at my.ncedcloud.org, SAML tokens pass silently to each application when you click its icon on your dashboard. You never re-enter credentials for these tools in the same browser session. Commonly used Home Base applications include PowerSchool, Amplify, Destiny Library Manager, and educator effectiveness platforms.

Target Applications: Optional Integrations Districts Can Add to NCEdCloud

Beyond mandatory Home Base tools, districts can connect additional third-party platforms to NCEdCloud. These are called Target Applications. Each PSU decides which tools to integrate and which user groups should see the icons. Once added, a new application icon appears on the relevant users’ dashboards. LEA Administrators submit Target Application requests through the Requests workflow in the RapidIdentity Portal.

Amplify Icon: How to Add Grades 5 and 6 to Your PSU

By default, the Amplify icon in NCEdCloud covers students in grades K through 4. PSUs that have purchased extended Amplify access for grades 5 and 6 can enable it through a workflow request in the RapidIdentity Portal. Once enabled, the icon appears for all students in the selected grades across the entire district. It cannot currently be limited to specific schools within the PSU.

ClassLink is an optional integration available to districts that want a launchpad alongside NCEdCloud. When Seamless Login is enabled, users who are already authenticated through NCEdCloud can move into ClassLink without a second login prompt. This is configured through the opt-in workflow in the portal and applies district-wide once active.

NCEdCloud Single Sign-On Explained

How SSO Works Inside the NCEdCloud IAM Service

Single Sign-On means one login at my.ncedcloud.org opens every connected application without re-entering credentials. NCEdCloud uses the SAML 2.0 protocol to pass authentication tokens to each integrated tool. When you click an application icon on your dashboard, the IAM service sends a SAML assertion to that application, and it logs you in automatically. The whole handshake happens in the background in under a second.

Note that NCEdCloud does not support Single Logout (SLO). Logging out of the portal does not automatically log you out of PowerSchool, Amplify, or any other individual application. The system shows a reminder to close your entire browser window after logging out. Closing the browser fully ends all application sessions even without SLO.

Why NCEdCloud SSO Is Mandatory for Home Base Since 2015

Since July 2015, all Home Base applications require going through NCEdCloud for authentication. There is no direct login path to PowerSchool or other Home Base tools that bypasses the IAM service. This applies to all public school units statewide without exception. The SSO requirement exists to give every PSU a single point of access control, audit logging, and credential management across all statewide tools.

NCEdCloud Multi-Factor Authentication

Who Must Use MFA in NCEdCloud

Multi-Factor Authentication is mandatory for all users holding a privileged role. LEA Administrators, LEA Data Auditors, Help Desk staff at every level, and School Help Desk roles must all set up MFA before their role is approved and activated. Standard teachers and general staff can optionally enable MFA for their own accounts, but it is not required unless they hold a privileged role.

How to Set Up a One-Time Password for NCEdCloud MFA

When your privileged role is approved, the system prompts you to configure MFA at your next login. Download an authenticator app on your smartphone, scan the QR code shown in the NCEdCloud portal, and enter the six-digit code generated by the app to confirm setup. From that point on, every login requires your password plus a fresh OTP from the app. Full setup instructions with video guidance are available at docs.ncedcloud.org.

NCEdCloud Account Settings and Profile Management

How Email Addresses Work in NCEdCloud Accounts

Users cannot manually edit their email address in the NCEdCloud portal. Email comes entirely from source data. For students, it always originates from their Student Information System record. For staff, the system checks PowerSchool first, then LINQ HR, then HRMS, using whichever source has a valid address first. If a staff member has addresses in multiple systems, only the PowerSchool address will appear in NCEdCloud.

NC DPI has acknowledged that employee email population from LINQ HR or HRMS has been unreliable over the years. The most dependable way to ensure a staff email address appears correctly in NCEdCloud is to enter it in NC SIS (PowerSchool). That data pipeline works consistently and rarely causes sync issues.

Setting a Preferred Email Address When You Have Multiple

Staff members with active assignments in more than one PSU may have multiple valid email addresses in the IAM service. Those users can designate a preferred email address from their Profile Settings inside the portal. Click your name in the upper right of the screen (in the red bar), select Profile Settings, then click the Edit Profile button. A dropdown will appear for selecting the primary email. The preferred address is the one that gets passed to Target Applications when you log in.

Challenge Response Security Questions: How They Work

Security questions are the backup authentication method for self-service password resets. They are set up during account claiming and must meet these requirements:

  • You must answer at least 5 of the 10 questions presented
  • Each answer must be at least 3 characters long
  • You cannot use the same answer for two different questions
  • Answers are not case-sensitive

If you answer only 5 questions, you will be asked 2 of those 5 during a future password reset. If you answer 7, you will be asked 2 of those 7. You will never be asked a question you did not answer during setup.

NCEdCloud for Charter Schools

How Charter Schools Participate in NCEdCloud

Charter schools in North Carolina have full access to the NCEdCloud IAM service using the same features as traditional public school districts. Each charter school receives its own LEA code and can designate LEA Administrators, Help Desk roles, and all other privileged positions. They can request Target Application integrations, set up MFA, use NCEdCloud Badges for young students, and submit workflow requests through the RapidIdentity Portal exactly the same way a district school would.

Charter School Source Data Requirements

For NCEdCloud to provision student and staff accounts automatically, charter schools must have an approved Student Information System or HR system connected to the NC DPI data pipeline with nightly feeds running correctly. Without accurate source data flowing each night, new account creation, profile updates, password generation, and application access will not work as expected. Charter school technology leads should verify their data connection setup with NC DPI before each school year begins to catch any configuration issues early.

Frequently Asked Questions

What is NCEdCloud?

NCEdCloud is North Carolina’s statewide Identity and Access Management service for public K-12 schools. It gives students, teachers, and staff a single set of login credentials at my.ncedcloud.org that work across Home Base applications and other integrated tools. Every public school district and charter school in the state uses it. It has been mandatory for all Home Base access since July 2015 and is operated by MCNC in partnership with NC DPI.

What is my.ncedcloud.org?

my.ncedcloud.org is the login portal for the NCEdCloud IAM service. You type it directly into your browser address bar, enter your credentials, and land on the Applications dashboard where all your connected education tools appear as clickable icons. It is the only address you need for accessing any NCEdCloud-connected application.

What is the difference between NCEdCloud and PowerSchool?

NCEdCloud is the authentication and access management platform. PowerSchool is a Student Information System that is one of many applications you reach through NCEdCloud. You do not log into PowerSchool directly. You log into NCEdCloud at my.ncedcloud.org, then click the PowerSchool icon on your Applications dashboard. NCEdCloud’s SSO handles the sign-in to PowerSchool automatically in the background.

How do I find my NCEdCloud username?

For students, it is the Pupil Number on your school records. For staff, it is the 10-digit State Employee UID from payroll or HR records. If your PSU uses Alias IDs, you may also log in with your school email address. Teachers can look up student usernames through the My Students view in the portal. Help Desk staff can look up any user’s UID across the district.

How do I reset my NCEdCloud password?

Go to my.ncedcloud.org and click Password Reset. Enter your username, complete the reCAPTCHA, and answer two of your security challenge questions. Set a new password that meets all requirements and return to the login screen. If self-service does not work, contact your school’s technology support staff or anyone with a Help Desk role in NCEdCloud who can reset it from their account.

Is NCEdCloud down right now?

Check status.ncedcloud.org for real-time status. The page tracks the Primary Data Center and Source File Processing components and updates regularly. NCEdCloud experiences brief warning-level incidents several times per month, typically resolving within 10 to 40 minutes. If the status page shows everything operational but you still cannot log in, the issue is likely specific to your account or device rather than the platform.

Can students use NCEdCloud on a Chromebook or phone?

Yes. NCEdCloud is browser-based and works on any device running a modern web browser, including Chromebooks, Windows laptops, Macs, tablets, and smartphones. Many schools pre-configure Chromebooks with managed browser policies that streamline the login experience. Avoid using private or incognito mode on any device when accessing NCEdCloud applications, as it breaks Single Sign-On.

Why does NCEdCloud ask me to log in again when switching applications?

This almost always happens because you opened a new incognito tab or window. NCEdCloud SSO uses session cookies that cannot be shared in private mode. Each private window is treated as a completely new, unauthenticated session. Use a standard browser window and keep all your NCEdCloud applications open in the same browser profile to stay signed in across all your tools without repeated prompts.

What does “Internal Error: No login context available” mean in NCEdCloud?

This error means the system lost its session context, usually because you started from a bookmarked login URL rather than navigating to my.ncedcloud.org fresh. Open a new tab, go directly to my.ncedcloud.org, and log in from there. If the error keeps appearing, clear the cookies for the ncedcloud.org domain in your browser settings and try again.

Can parents access NCEdCloud?

Parents do not have their own NCEdCloud accounts. Parent access to student information goes through separate platforms like the Infinite Campus Parent Portal or PowerSchool’s parent-facing login, which are distinct from the NCEdCloud IAM service. If parents need help finding their child’s school login credentials, they should contact the student’s teacher or the school office.

NCEdCloud Training and Support Resources

Training Videos and Documentation at docs.ncedcloud.org

Identity Automation maintains a full training site at docs.ncedcloud.org with updated video guides covering how to claim an account, reset student passwords, configure MFA, and navigate the RapidIdentity Portal. Separate video tracks exist for LEA Administrators, teachers, and general users. New features for each school year are documented there as they roll out.

Ask the Experts Webinars for LEA Administrators

Identity Automation and NC DPI run quarterly webinars for LEA Administrators called Ask the Experts. These sessions allow district-level staff to ask live questions about NCEdCloud configuration, new feature deployments, and common support challenges. Invitations are sent through Identity Automation. You can also find information about upcoming sessions at ncedcloud.mcnc.org/ask-experts.

Who to Contact When NCEdCloud Issues Cannot Be Resolved at the School Level?

The support path runs local first. Students and teachers bring issues to their school’s technology support team. If the local team cannot resolve the problem, they escalate to the Identity Automation Support Community. Individual users do not typically contact MCNC or NC DPI directly. This tiered structure keeps district administrators informed about what issues are occurring across their schools and ensures problems reach the right technical team for resolution.

Share This Article
Leave a Comment