Blackbaud ID FAQs
General
As part of our ongoing efforts to improve usability, create a state-of-the-art login experience, and increase security, GrantsConnect upgraded authentication by moving all users who don’t use Single Sign-On (SSO) to Blackbaud ID (BBID).
Blackbaud ID is a platform capability that exclusively focuses on authentication and staying current with the ever-evolving security landscape. By transitioning non-SSO users to Blackbaud ID, our users will see the following benefits:
-
The authentication standards that data is secured behind are the latest in the industry and utilized across Blackbaud solutions.
-
These enhanced authentication standards with Blackbaud ID provide best-in-class security, privacy, and compliance. This includes enhanced password security requirements, multi-factor authentication (MFA), and brute force attack protection on all login attempts.
-
Expanded multi-factor authentication (MFA) options enable you to enhance security through text messages or mobile authenticators.
-
Social authentication through Google or Apple enables you to use Google or Apple’s authentication requirements, including their password reset functionality and other support needs.
As of December 2023, all users who do not use Single Sign-On (SSO) have been moved to Blackbaud ID. This includes Grant Managers and applicants.
We are currently only enabling Blackbaud ID authentication for plain login (email address and password) users. We do not yet have a timeline to share for migrating SSO users.
This currently only impacts those users who log in using an email address and password. The login experience for users who authenticate through Single Sign-On (SSO) remains the same.
Shared logins can lead to a number of security risks. For example, it can make it difficult to detect unauthorized access or malicious activity as we cannot track who is accessing the system when multiple people use the same login credentials. Additionally, we are unable to restrict access to specific resources or data without unique logins. This can potentially lead to data breaches and other security incidents if everyone is accessing the system with the same credentials. Finally, this can make it challenging to maintain accountability since any changes your users make will be tracked using the shared login - we cannot determine the specific individual who may be responsible for taking these actions.
For these reasons, we do not allow using shared logins. Instead, we require that each user has their own unique login credentials. This applies to Grant Managers and applicants. This will help ensure your system is secure and you're able to properly track all actions taken in your account.
Account setup
No, the email address used for your Blackbaud ID account must match the email for your GrantsConnect account. If you do not already have an account with this email address, you will need to create a new one.
It is recommended to double-check the email address associated with your account. If you cannot find the email in your inbox or Junk folder, your organization's email server may have blocked it. For further instructions, see Blackbaud ID > Missing your confirmation email?.
Yes, you can turn off authentication through social sign-in at any time and sign in with a Blackbaud ID email address and password instead. For instructions, see Blackbaud ID > Social sign-ins.
Blackbaud ID account
Emails related to Blackbaud ID will come from Blackbaud Authentication Services <noreply@blackbaud.com>. This includes the confirmation email you receive when first creating your account.
You can change your email address in your Blackbaud ID profile. For more information, see Article 53265: I need to change my email address on Blackbaud.com in the Blackbaud Knowledgebase.
Multi-factor authentication (MFA)
Note: To learn more about setting up MFA and troubleshooting any issues, see Blackbaud ID > Multi-factor authentication (MFA) FAQs.
No, this is not an option. Multi-factor authentication (MFA) is only available through SMS text messaging, a mobile authenticator app, or social sign-in. For more information, see Blackbaud ID > Get started > Multi-factor authentication.
You can request a new recovery code in your Blackbaud ID profile. For more information, see Article 199377: How can I change my setup for Multi-Factor Authentication (MFA)? in the Blackbaud Knowledgebase or Manage Multi-Factor Authentication in the GrantsConnect Help Center.
Note: If you aren't able to access your profile, you'll need to contact support to request a new code. For instructions, see Article 114148: I lost my phone (or bought a new one) or am not receiving the verification code and can't log into Blackbaud ID.
Tip: If you are using a mobile authenticator app, it is recommended to set up a recovery phone number as a backup method to confirm your identity and access your account even without the recovery code. For more information, see Article 201306: How to update the recovery phone number?.
Product access and permissions
You will continue to use your existing GrantsConnect URL - such as yourcausegrants.com or apply.yourcausegrants.com. Product links will not change as part of this migration.
No, this does affect your permissions and the functionality you have access to in GrantsConnect.
Applicant experience
You must use the original application link you received. You can only start the application using that unique link.
Note: If you have already started an application, you should continue to log in to GrantsConnect as you normally would. For example, by going to apply.yourcausegrants.com.