Add or Change MFA and SSPR Security Information for your CofC Account


Issue

How do I set up my account for Multi-Factor Authentication (MFA) or Self-Service Password Reset (SSPR)?

How do I add additional security methods for authentication on my account?

I have already set up MFA and SSPR, but my phone has changed. How to I update my authentication methods?

I can't get into my account because I no longer have access to my MFA verification methods. Can you remove this requirement from my account?

I lost my old phone and can't verify my account now.

I deleted the Authenticator app, and now can't get into my account.

I need my MFA methods reset.

How do I confirm my authentication methods for my account?

I am locked out of my account but can't reset the password because I recently changed my phone number.  What should I do?

Environment

College of Charleston Microsoft Office 365 accounts

Cause

You may need to change or add new security methods to your account due to:

  • Device changes (such as getting a new tablet or cell phone)
  • Outdated security methods (like if you changed phone numbers)
  • Security protocol changes (such as SMS retirement)

Resolution

First Time Setup

The first time you log into your account, you will be automatically prompted to add security methods.

    • After entering the password, a message will say more information is needed, prompting you to add security methods.
    • Just follow the on-screen prompts to complete setup.
    • The Microsoft Authenticator app is recommended and preferred to use for your primary authentication method. The advantage of setting up the Microsoft Authenticator app is you can verify your account over Internet in places where you don't have access to cellular service (such as when traveling overseas). For help on setting up the Microsoft Authenticator app, see KB0010708: Set Up the Microsoft Authenticator App for Your CofC Account
    • You will be required to set up several methods for authentication to reduce the chances of you not being able to access your account. These secondary methods are more used for SSPR.

 

Adding or Changing Your Security Methods

  • If your mobile device changes, you will need to update the security methods on your account.
  • Set up at least two methods, and verify the account information is still correct every 180 days. This will greatly reduce the chances of you losing access to your account.
  • You must be able to access your account in order to add or change your security methods. Even if you don't have access to your primary security method, you may still be able to access your account with a secondary method, if you have an authenticated cached session still available, or if you are on campus.
  • If you cannot access your account at all, see the section regarding re-registering your MFA methods at the bottom of this article.

To view and confirm your existing authentication methods:

      1. Navigate to the My Sign-Ins Portal: https://aka.ms/ssprsetup/
      2. Follow the prompts to log in
      3. The Security Info page will load, displaying your authentication methods
      4. Review the listed methods.
      5. Make sure you have at least two authentication methods listed
        • Note, you may use SMS (text) or Email as a secondary SSPR method, but those will not work for MFA verification.
      6. Make sure the methods listed are current
      7. If you do not have at least two current authentication methods, update your methods using the instructions below; otherwise, no further action is needed

 

You can add additional security methods by:

      1. Navigate to the My Sign-Ins Portal: https://aka.ms/ssprsetup/
      2. Follow the prompts to log in
      3. Click +Add Method
      4. Choose the method you would like to add and click Add
      5. Follow the on screen prompts to finish setting up your selected method

 

To remove a method that is no longer valid:

      1. Navigate to the My Sign-Ins Portal: https://aka.ms/ssprsetup/
      2. Follow the prompts to log in
      3. Click the Delete link to the right of the method you wish to remove

 

Re-registering Security Methods On Your Account

If you are not able to get into your account at all with methods that are currently set up, start a chat with the IT Service Desk  (visit help.cofc.edu for additional contact information) in order to request the opportunity to re-register your MFA and SSPR authentication methods. Be ready to provide the following information to verify your identity:

    • Your CWID
    • Your birthdate
    • The last 4 of SSN
    • Your username

Once your MFA methods are reset, you will be prompted to set MFA up the next time you log in.