OVERVIEW
Target audience: Anyone from the McGill community.
When your McGill account is protected with Two-Factor Authentication (2FA), you also have access to Self Service Password Reset (SSPR). If you forget your McGill password, or are locked out of your account, you can reset your own password using two of the authentication methods you set up when configuring 2FA.
In this article:
Viewing my 2FA/SSPR account settings
To see your account settings:
- Go to https://myprofile.microsoft.com
- In the left sidebar, click either of the following menu items:
- Security info, or
- Overview, then under Security info click Update info:
- You will now see the list of methods you selected to authenticate with 2FA, and/or to reset your password using SSPR:
Changing my default authentication method
Your default sign-in method is listed at the top of the Security Info page. To change your default authentication method:
- Go to https://myprofile.microsoft.com
- In the left sidebar, click either of the following menu items:
- Security info, or
- Overview, then under Security info click Update info:
- Your default sign-in method is listed at the top of the Security Info page. Click Change:
- A window will appear, and you can select a new default method from the drop-down menu.
- If you would like to add additional authentication methods, click “Add method”. A window will appear, and you can select a new default method from the drop-down menu.
What are the authentication methods for 2FA/SSPR?
Authentication method |
Usage |
How it works |
|---|---|---|
|
Microsoft Authenticator – notification |
2FA and SSPR |
The Microsoft Authenticator app can help prevent unauthorized access to your account by sending a notification to your smartphone or tablet. Simply select "Approve" to authenticate, or "Deny" to protect your account if you are not in the process of logging in. The benefit of receiving a notification is that there are no codes to enter. The app is available for Android, iOS, and Windows. |
|
Authenticator app or hardware token - code |
2FA and SSPR |
Authenticator apps generate a verification code you can enter into the sign-in interface. |
|
Phone: text me a code |
2FA and SSPR |
A text is sent to your mobile phone number containing a verification code. Enter the verification code in the sign-in interface to continue. |
|
Phone: call me |
2FA and SSPR |
An automated voice call is made to your mobile phone number. Answer the call and press # in the phone keypad to authenticate. |
|
Email address |
SSPR only |
When resetting your password using SSPR, you will have to go through a two-step verification process using the authentication methods you set up when configuring 2FA/SSPR. Microsoft recommends the use of an alternate email account that does not require the use of your McGill Password to access. A verification code will be sent to your alternate email address. Enter the verification code provided in the sign-in interface to continue. |
|
Security questions |
SSPR only |
Answer three of the security questions you set up as part of the authentication process. |
NOTE:
Don't have a access to a landline, cellphone, smartphone? Download OneAuth on your desktop or laptop.
ADDITIONAL INFORMATION:
To verify that your 2FA account has been set up properly, refer to the section Verification of 2FA setup in the article Two-Factor Authentication (2FA): Set up instructions.
For additional information on 2FA and SSPR, see the 2FA FAQs.
Still need help?
Contact the IT Service Desk
ADDITIONAL REFERENCES: