View and modify 2FA and SSPR account settings


OVERVIEW

Target audience: Anyone from the McGill community.

When your McGill account is protected with Two-Factor Authentication (2FA), you also have access to Self Service Password Reset (SSPR). If you forget your McGill password, or are locked out of your account, you can reset your own password using two of the authentication methods you set up when configuring 2FA.

In this article:

Viewing my 2FA/SSPR account settings

To see your account settings:

  1. Go to https://myprofile.microsoft.com
  2. In the left sidebar, click either of the following menu items:
    • Security info, or
    • Overview, then under Security info click Update info:



  3. You will now see the list of methods you selected to authenticate with 2FA, and/or to reset your password using SSPR:

 



Changing my default authentication method

Your default sign-in method is listed at the top of the Security Info page. To change your default authentication method:

  1. Go to https://myprofile.microsoft.com
  2. In the left sidebar, click either of the following menu items:
    • Security info, or
    • Overview, then under Security info click Update info:
  3. Your default sign-in method is listed at the top of the Security Info page. Click Change:


  4. A window will appear, and you can select a new default method from the drop-down menu.
  5. If you would like to add additional authentication methods, click “Add method”.  A window will appear, and you can select a new default method from the drop-down menu.



What are the authentication methods for 2FA/SSPR?

Authentication method

Usage

How it works

Microsoft Authenticator – notification

*NOTE: This is the quickest method of authentication*

2FA and SSPR

The Microsoft Authenticator app can help prevent unauthorized access to your account by sending a notification to your smartphone or tablet. Simply select "Approve" to authenticate, or "Deny" to protect your account if you are not in the process of logging in. The benefit of receiving a notification is that there are no codes to enter. The app is available for Android, iOS, and Windows.

Authenticator app or hardware token - code

2FA and SSPR

Authenticator apps generate a verification code  you can enter into the sign-in interface.

Phone: text me a code

2FA and SSPR

A text is sent to your mobile phone number containing a verification code. Enter the verification code in the sign-in interface to continue.

Phone: call me

2FA and SSPR

An automated voice call is made to your mobile phone number.  Answer the call and press # in the phone keypad to authenticate.

Email address

SSPR only

When resetting your password using SSPR, you will have to go through a two-step verification process using the authentication methods you set up when configuring 2FA/SSPR. Microsoft recommends the use of an alternate email account that does not require the use of your McGill Password to access. A verification code will be sent to your alternate email address. Enter the verification code provided in the sign-in interface to continue.

Security questions

SSPR only

Answer three of the security questions you set up as part of the authentication process.

note

NOTE:

Don't have a access to a landline, cellphone, smartphone? Download OneAuth on your desktop or laptop.



warning

ADDITIONAL INFORMATION:

To verify that your 2FA account has been set up properly, refer to the section Verification of 2FA setup in the article Two-Factor Authentication (2FA): Set up instructions.

For additional information on 2FA and SSPR, see the 2FA FAQs.

Still need help?

Contact the IT Service Desk

references

ADDITIONAL REFERENCES: