Issue/Question
What verification methods can I use with Multi-Factor Authentication (MFA) and Self-Service Password Reset (SSPR)?
Environment
- Multi-Factor Authentication (MFA)
- Self-Service Password Reset (SSPR)
Resolution
When signing onto certain Macomb electronic resources you will be asked for your password and one other verification method.
When resetting a forgotten password, you will be asked for two verification methods.
- This two-step process is referred to as Multifactor Authentication or MFA.
- MFA helps secure your information from unauthorized access.
You must enroll in at least one Strong verification method and two total verification methods. We strongly recommend enrolling in as many verification methods that work for your situation.
Strong Verification Methods – May be used for Sign-on or Password Reset
You may enroll in any or all the following verification methods, which can be used when signing on or resetting a forgotten password.
Mobile app – notification (recommended method)
Receive an application notification or retrieve a verification notification on a smartphone or tablet.
- The Microsoft Authenticator App is downloaded on your smartphone and a verification request is sent to your phone. It asks you to complete the verification process by selecting Approve from a push notification.
To view the instructions please visit this page: Mobile App – Notification
Mobile app – verification code
Receive an application notification or retrieve a verification code on a smartphone or tablet.
- The Microsoft Authenticator App is downloaded on your smartphone and you must type the six-digit code provided in the app into your device to complete the verification process.
To view the instructions please visit this page: Mobile App – Verification Code
Phone call
- You will receive an automated call asking you to verify that you are attempting to log in. Press the # key to complete the verification process.
To view the instructions please visit this page: Phone Call
SMS (text) message
- You will receive a SMS (text) message with a six-digit code that you must type into your device to complete the verification process.
To view the instructions please visit this page: SMS (text) message
Physical Security Key
If you do not have a mobile phone or tablet, fill out the form below to request a YubiKey. There is no cost to you.
To request a security key fill out a Service Request for a physical hardware key (YubiKey).
- Once you have picked up the YubiKey, you register the key to your Macomb account. The verification process is completed by plugging in the YubiKey to the device, or by using NFC (for NFC-enabled devices only).
To view the instructions please visit this page: YubiKey Physical Security Key
Refer to the table below to see what strong verification methods can be used with each type of device you have.
|
|
Strong Verification Methods Supported
|
Uses
|
|
Devices
|
Call
|
SMS/Text
|
App Notification
|
App Code
|
Sign-on
|
Password Reset
|
|
Home or Office Phone
|
X
|
|
|
|
X
|
X
|
|
Basic Mobile Phone
|
X
|
X
|
|
|
X
|
X
|
|
Smart Phone
|
X
|
X
|
X
|
X
|
X
|
X
|
|
Tablet
|
|
|
X
|
X
|
X
|
X
|
|
YubiKey
|
|
|
X
|
|
X
|
|
Optional Verification Methods – May be used for Self-Service Password Reset (SSPR) Only
You may also enroll in any or all the following verification methods, which can be used for resetting a forgotten password:
- Security Questions: Set up a bank of 5 security questions.
- 3 of the 5 questions are randomly selected when used.
- Alternative Email: Receive a verification code sent to a non @macomb.edu email address.
To learn more about SSPR (Self-Service Password Reset) review the following knowledge base article: Setting Up Self-Service Password Reset (SSPR)