Microsoft is deprecating the use of SMS, voice call, email, and security questions as verification methods for MFA and SSPR due to significant security vulnerabilities.
Starting June 24th, KPU will be updating its MFA and SSPR methods to enhance the security of your accounts and our systems. This means that after this date, these methods will no longer be available for MFA and Self-Service Password Reset (SSPR).
New MFA and SSPR Methods
After June 24th, you will be required to use the following method for both MFA and SSPR:
- Microsoft Authenticator App (Recommended): This app provides a secure and convenient way to verify your identity. It offers several options:
- Push Notifications: If you have push notifications enabled in the Authenticator app, you'll be prompted to enter the number displayed on your login screen into the app to approve the request
- Verification Codes: The app generates a unique, time-sensitive 6-digit code that you enter on the login screen. This can be used if you don't have data access.
How This Affects Self-Service Password Reset (SSPR)
These changes also apply to Self-Service Password Reset (SSPR). If you forget your password and need to reset it, you will no longer be able to receive a verification code via SMS, voice call, or answer security questions. Instead, you will need to use one of the following:
- Microsoft Authenticator App:
- Push Notification: If you have push notifications enabled in the Authenticator app, you'll be prompted to enter the number displayed on your login screen into the app to approve the password reset.
- Verification Code: You can open the Microsoft Authenticator App, tap on our KPU email, and enter the 6-digit code shown.
What You Need to Do
- If you are currently using SMS or voice call for MFA: You must set up the Microsoft Authenticator app or obtain a hardware token before June 24th to avoid being locked out of your KPU accounts and to ensure you can use SSPR.
- If you are already using the Microsoft Authenticator app or a hardware token: No action is required.
Resources and Support
- Detailed instructions on setting up the Microsoft Authenticator app can be found here: How to Setup Microsoft Authenticator App for MFA
- Detailed instructions on how to use the Authenticator app for Self-Service Password Reset (SSPR) can be found here: How to reset your password using App or Hardware Token
- For assistance with setting up the Microsoft Authenticator app or if you are unable to use the app, please contact the IT Service Desk:
Email: Servicedesk@kpu.ca
Phone: 604.599.2116