Password Management FAQ

Summary

FAQ and information about the new Azure Self-Service Password Management System

Body

How will users know first password?

For Students: Initial temporary passwords will be their CTCLink ID and 6-digit birthday. Example: CTCLINK ID Is 8675309 and birthday is December 28th, 1963, initial password will be 8675309122863

For Employees: Managers will receive temporary initial passwords for their employees to use the first time login.

How will users register MFA or Self-Service Password Reset Methods?

After the first successful login, the user will be prompted to register their SSPR and MFA Methods. For SSPR, this can include Phone Number, Authentication App, personal E-Mail, and Security Questions. For MFA, this includes Phone number, FIDO key, Authentication app.

What if my student's initial password does not work and their SSPR methods are not available or not pre-populated?

Contact the Service desk and we will set a new temporary password for the user.

My students don't have personal E-Mail addresses or phone numbers. How can they reset their passwords and login for the first time?

Any student without a personal e-mail address and a personal cell phone can use the Security Questions option for password resets. For initial login, they should use their default initial password which is their CTCLink ID and 6 digit birthday.

Can students still reset their passwords on desktops without logging in?

Yes- We will configure our Green River desktops to allow users to Reset Passwords prior to first login.

My students are being prompted to register methods for MFA- I thought MFA wasn't enabled yet?

We are not enabling MFA for students until January 2024. Self-Service password reset uses the same registration methods as MFA, but registering these for Self-Service Password reset does NOT enable MFA. If a student does register for Self-Service Password Reset using a method that is also compatible with MFA (Authenticator app or phone), then that method will automatically be registered for MFA as well, making the process simpler when MFA is enabled.

Users will NOT be prompted for MFA until MFA is specifically enabled.

A student wants to enable MFA.

Submit a request via the Student Technology Support Desk and we can enable MFA.

Will there be a delay between password reset and being able to use that password?

No- there will be no delay. The password is immediately use-able from on-premises computers and on cloud applications such as Office 365.

Why can't I use my YubiKey for Password Reset?

Password Resets are using "Something you know" authenitcation factor. This could be: The password to a different email account, your phone number, or the password to unlock your phone. YubiKeys are only "Something you have" factors - which are used only for MFA.

If you do not have a phone or are not comfortable using one, you can register Security Questions for Password Reset.

Details

Details

Article ID: 856
Created
Fri 9/29/23 1:04 PM
Modified
Tue 2/6/24 7:55 PM

Related Articles

Related Articles (1)

New Students will use their temporary initial password {CTCLinkID}{6-Digit birthday} to login for the first time, then they will set a new password and register for Password Reset.