Combined MFA and SSPR

Microsoft has recently combined the Self-Service Password Reset (SSPR) and Multi-Factor Authentication (MFA) registration process. This document provides details to help users register and update their security information. 

Here is the list of authentication methods and what they can be used for:

New users

On initial sign-in, new users will be forced through a password reset process. 

Go to https://portal.office.com Enter the credentials provided to you. 

You will be prompted to change your password.  

Sign in with your new password

We require you to provide a phone number and alternate email address to verify who you are. Click Next.

To setup the Smart Phone app, Download the “Microsoft Authenticator” Application on your smart phone. Once installed, Click Next on the web page and follow the directions.

Setup a phone number. Enter a phone number and select Text or Call.  This phone number can be a cell phone or a home phone.  Keep in mind that you will need to be able to receive a call or text message to authenticate your login.

When you click Next, you will receive a call or text message.  If you receive a text message, enter the code on this screen. Click Next.

Once the login is authenticated, click done.

These are the minimum methods required.  Please add additional authentication methods to your account once you are logged into your account.
 

To modify your security settings: 

Log into https://portal.office.com, go to the upper right corner, click on the circle with your initials and click “View Account”.   Or directly by going to the URL: https://aka.ms/setupsecurityinfo

Select “Security Info” on the left

From this screen you can Add or Modify all your authentication methods.

Available Authentication Methods

Authenticator App – If you have multiple devices, you can add up to five of these devices. Code or push notification

Phone – Text code or Voice call confirmation

Alternate Phone – Voice call confirmation

Email – Code. Used for password resets only.

To change the Default sign-in method

Click “Change”

Select the method you want to use as default. The other methods are still available in case you do not have access to the default method.

Also note that you will be prompted every 180 days to validate your authentication methods are correct.

Pennsylvania College of Technogy's ITS department encourages the use of the “Microsoft Authenticator – Notification” method. This will simplify the process by sending a notification on your device with an Accept or Deny button.

The Microsoft Authenticator App will prompt for your approval, Click Approve if you were trying to sign in, or Deny if you were not.