Multi-Factor Authentication (MFA) & Self-Service Password Reset (SSPR)

Description

Multi-Factor Authentication (MFA) is a Microsoft feature that adds another layer of security to protect your account. Gannon has moved toward MFA as it provide further account security/protection for the Gannon Community depending on the information you provided when setting up the Self-Service Password Reset (SSPR).

MFA Verification Methods for Sign-in:

• Text/call to phone number provided. This could be cell, home (not recommended), or office phone number.
• Microsoft Authenticator app (requires download of Microsoft Authenticator App on your phone)

On sign-in, MFA relies on two forms of authentication, having the password for the account and having access to a trusted device and will be prompted when you sign in from a network outside Gannon. If you are connected with the SonicWALL NetExtender VPN, you will still get prompted for the MFA verification. With your Gannon work or school account, there's no way for you to turn off this requirement. 

Self-Service Password Reset (SSPR) is a Microsoft feature that allows an enrolled user the ability to reset their own password or unlock their account through Multi-Factor Authentication (MFA). You will need access to any configured email address or mobile device during enrollment.

MFA Verification Methods for Password Resets/Unlocks:

• Text/call to phone number provided. This could be cell, home (not recommended), or office phone number.
• Microsoft Authenticator app (requires download of Microsoft Authenticator App on mobile device)
• Alternative personal email

Table of Content: 

• Enrolling in SSPR and MFA
• Microsoft Authenticator App set up instructions
• Updating MFA and SSPR
• Reconfirming Authentication methods
• Changing Default Sign-in Method

More Information

• During the sign-in process the user will be prompted for an identification code through provided alternative email, phone number, or authentication app.  This added layer is designed to be enforced off campus only where most vulnerability can occur. You will not be prompted while on campus.

Helpful Links 

• Click here to learn more about Microsoft’s Multi-Factor Authentication, from Microsoft’s site.

Resolution

Enrolling in MFA and SSPR:

1. Open the web browser on your device and navigate to office.com. 
   • You will be redirected to the Gannon M365 login page. 
2. Enter your Gannon email address and password
3. Select 'Next' on the "More information required" page
   • Follow the prompts to set up the Microsoft Authenticator App on a mobile device or select 'set up another method' at the bottom left.

Note: It is recommended to have multiple verification methods set up.

Microsoft Authenticator App set up instructions

Microsoft Authenticator is a security app for two-factor authentication, otherwise known as Multi-Factor Authentication (MFA). Depending if you are enrolling or just updating your MFA, settings see the corresponding sections in this KB.

Updating MFA and SSPR:

1. Navigate to https://aka.ms/ssprsetup
2. Login with Gannon email address and password
   • Select  “Change” next to the setting you wish to update
     • Follow the instructions above for each setting or delete the method and start over by selecting "+ Add sign-in method"
   • Select the “finish” button when you are complete

Reconfirming Authentication methods:

After a period of time, and to ensure you still have the appropriate methods registered, your administrators will require you to reconfirm your authentication methods. 

Changing Default Sign-in Method:

• Navigate to https://aka.ms/ssprsetup
  • You will be prompted to verify yourself with the current verification method
• Select "security info" from left panel
• Select "change " next to the default sign-in method
• In the drop down select what verification you would like to use and select confirm.