Multi-Factor Authentication (MFA) & Self-Service Password Reset (SSPR)

Tags MFA SSPR

Description

Multi-Factor Authentication (MFA) is a Microsoft feature that adds another layer of security to protect your account. Gannon has moved toward MFA as it provide further account security/protection for the Gannon Community depending on the information you provided when setting up the Self-Service Password Reset (SSPR).

MFA Verification Methods for Sign-in:

  • Text/call to phone number provided. This could be cell, home (not recommended), or office phone number.
  • Microsoft Authenticator app (requires download of Microsoft Authenticator App on your phone)

On sign-in, MFA relies on two forms of authentication, having the password for the account and having access to a trusted device and will be prompted when you sign in from a network outside Gannon. If you are connected with the SonicWALL NetExtender VPN, you will still get prompted for the MFA verification. With your Gannon work or school account, there's no way for you to turn off this requirement. 

Self-Service Password Reset (SSPR) is a Microsoft feature that allows an enrolled user the ability to reset their own password or unlock their account through Multi-Factor Authentication (MFA). You will need access to any configured email address or mobile device during enrollment.

MFA Verification Methods for Password Resets/Unlocks:

  • Text/call to phone number provided. This could be cell, home (not recommended), or office phone number.
  • Microsoft Authenticator app (requires download of Microsoft Authenticator App on mobile device)
  • Alternative personal email

Table of Content: 


More Information

  • During the sign-in process the user will be prompted for an identification code through provided alternative email, phone number, or authentication app.  This added layer is designed to be enforced off campus only where most vulnerability can occur. You will not be prompted while on campus.

Helpful Links 

  • Click here to learn more about Microsoft’s Multi-Factor Authentication, from Microsoft’s site.

Resolution

Enrolling in MFA and SSPR:

  1. Open the web browser on your device and navigate to office.com
    • You will be redirected to the Gannon M365 login page. 
  2. Enter your Gannon email address and password
  3. Select 'Next' on the "More information required" page
    • Follow the prompts to set up the Microsoft Authenticator App on a mobile device or select 'set up another method' at the bottom left.

Note: It is recommended to have multiple verification methods set up.

Microsoft Authenticator App set up instructions

Microsoft Authenticator is a security app for two-factor authentication, otherwise known as Multi-Factor Authentication (MFA). Depending if you are enrolling or just updating your MFA, settings see the corresponding sections in this KB.

iPhone Android
  1. Go to the App Store
  2. Search for Microsoft Authenticator
  3. Download the Microsoft Authenticator app 
  4. Open the apptap allow on the "Authenticator would like to send you notifications screen"
  5. On the accounts screen, click on "ADD ACCOUNT"
  6. Select "work or school account" under "what kind of account are you adding?"
  7. Click "Ok" on the pop up asking "Authenticator would like to access the camera?"
    • You will need to take a picture of the QR code found in the next step of setup instructions below.
  1. Go to Appsselect Play Store
  2. Search for Microsoft Authenticator
  3. Download the Microsoft Authenticator app 
  4. Once installed, open the app
  5. On the accounts screen, click on "ADD ACCOUNT"
  6. Select "work or school account" under "what kind of account are you adding?"
  7. Click "ALLOW" on the pop up asking "Allow Authenticator to take pictures and record video?"
    • You will need to take a picture of the QR code found in the next step of setup instructions below.

Updating MFA and SSPR:

  1. Navigate to https://aka.ms/ssprsetup
  2. Login with Gannon email address and password
    • Select  “Change” next to the setting you wish to update
      • Follow the instructions above for each setting or delete the method and start over by selecting "+ Add sign-in method"
    • Select the “finish” button when you are complete

Reconfirming Authentication methods:

After a period of time, and to ensure you still have the appropriate methods registered, your administrators will require you to reconfirm your authentication methods. 

Changing Default Sign-in Method:

  • Navigate to https://aka.ms/ssprsetup
    • You will be prompted to verify yourself with the current verification method
  • Select "security info" from left panel
  • Select "change " next to the default sign-in method
  • In the drop down select what verification you would like to use and select confirm

Details

Article ID: 120140
Created
Tue 11/10/20 3:32 PM
Modified
Thu 11/2/23 4:25 PM

Related Articles (4)

How to add and remove email accounts to phones and tablets
Instructions on the multiple ways you can reset or change a network password without calling in and how to sync new password to Gannon computer while off-campus.

Related Services / Offerings (1)

Reset or unlock a Network ID password. Gannon policy is that Network passwords expire once a year (365 days).