Setting or Changing Your Password (SSPR)

Table of Contents:

-Changing Your Password if You Know It

- What is SSPR?)

- Setting an Your Password with SSPR 

- Setting up or Updating SSPR

- Details on SSPR Sign-in Methods

If you know your password and want to change it

1. Log into https://mysignins.microsoft.com/security-info with your IC email and password.
2. Where it says Password, click "change"
   1. See this article for password requirements and guidance: Article - Password Policy and Guidance
3. While you are here:
   1. Review any other sign-in methods listed and delete any that you know longer have.
   2. Then add more sign-in methods, so that you have at least two in addition to your password.
      (These other methods will allow you to use SSPR to reset your password if you forget it. See below,)

SSPR: If you don't have a password or have forgotten it

Set or reset your password with SSPR

• Go to: https://aka.ms/sspr
• Select “I forgot my password” and click Next.
• You will be prompted to use two of the verification methods configured in SSPR.
  • For most students, faculty, and staff these are the email address and phone number that were populated when you enrolled or were hired.
• Once verified, you will be prompted to create a new password.
  • IC password requirements are here: Article - Password Policy and Guidance
• If you are not able to use SSPR for any reason, please reach out to the IT Service Desk for assistance.
  • Request Form - SSPR (Self Service Password Reset)

Configure SSPR sign-in methods

1. Log into https://mysignins.microsoft.com/security-info with your IC email and password.
2. You will see password and other sign-in methods. The other methods are what are used by SSPR to verify your identity if you forget your password.
3. Review the existing sign-in methods listed and delete any that are out of date.
4. Then add current sign-in methods, so that you have at least two.
   1. More details on each option are below.

Details on SSPR sign-in methods

Option 1: Your Phone

1. Click + Add method and select Phone, then click Add
   • Fill out your phone number, including area code. Make sure to select the correct country code (1 for USA).
2. Microsoft will then send an SMS text message* to your phone with a six-digit code.
3. Click Next and enter the code on your computer. Once entered, click Next again.
4. Be sure to enroll at least one other method. You'll need to verify by two methods to reset your password.

*Alternatively, you can have it call that phone number instead of texting. Select “Call me” and click Next for it to call your phone. Once called, it will ask you to press the " # " key on your phone to verify.

Option 2: Your Personal (non-IC) mail

1. Click + Add method and select Email, then click Add.
   • Type in your personal non-IC email address ("alternate email") and click Next.
2. In the email account you entered, look for a message with the subject “Ithaca College account email verification code,” which contains a code.
3. Type the code you received into the SSPR enrollment page and click Next to complete adding your email verification method.
4. Be sure to enroll at least one other method. You'll need to verify by two methods to reset your password.

Option 3: An Authenticator App

Most authenticator apps can be used for SSPR. But understand this is just for SSPR and is independent of using Duo to log into email and other systems. Microsoft assumes you'll want to use their Microsoft Authenticator app for SSPR, but you could add Duo Mobile, Google Authenticator, or others instead. If you're unsure about setting up an app for SSPR, you can configure phone and email above.

1. On your computer, click + Add method and select Authenticator app, then click Add.
   • You will be prompted to install the Microsoft Authenticator app on your phone. ​​​
     • (Step 2 below will walk you through installing the app adding your IC account to it.)
     • Click Next to say you've installed the app, and then click Next again when it asks you to start setting up the account on your phone, and it should show you a QR code.
2. On your phone, install the Microsoft Authenticator App if you don't already have it, and then open the app.
   • Click Add Account.
     • (If you already have another account set up, you'll need to click on the menu on the top right ( ⋮ ), then click Add account.)
     • Select Work or School Account and log in with your IC account, or select Scan a QR code.
       • This will open a camera on your phone, point it at the displayed QR code on your computer to attach your account.
3. On your computer, click Next and it will send a test notification to your phone,
4. On your phone, click Approve to verify it’s working.
5. Click Next once more on your computer, to successfully add the authenticator app.
6. Be sure to enroll in at least one other method. You'll need to verify by two methods to reset your password.

If you set up the authenticator app and not a phone number, you may require service desk assistance (if you need to re-enroll your authenticator). This could occur if your reset your phone or move to a new mobile device. For this reason, we recommend you add both to the account.