Self Service Password Reset (SSPR) and MFA device Registration

Dear Howard University Community,

We write to inform you about an upcoming change to our cybersecurity policy that will affect the self-service password reset (SSPR) and multifactor authentication (MFA) device registration processes.

When will the change happen? Why is this change necessary? 

Tomorrow, Wednesday, June 5, 2024, ETS will enhance the self-service password reset (SSPR) portal by requiring two methods of authentication when initiating a self-started password reset. 

Additionally, to further fortify our security posture, you will receive an email notification confirming that you registered a new device to your account after registering a new device for multifactor authentication (MFA). 

These changes increase your account's security by validating your identity and confirming when a new device has been associated with your multifactor authentication app. 

How does this impact me?

• Self-Service Password Reset (SSPR): After initiating a password reset through SSPR, you will be prompted to authenticate using a second method in addition to the existing verification method. Two of the three approved authentication methods (Email, SMS text, Microsoft Authenticator) must be used to reset your password in the SSPR portal.
• New Multifactor Authentication (MFA) Device Registration: You will promptly receive an email notification whenever a new device is registered for MFA with your account. If you completed this action, consider the email as confirmation. However, if you did not register a new device, this email will warn you that your account may have been compromised. The email notification will include actions you should take if you did not register a new device. 

What if I have issues resetting my password? 

If you have issues resetting your password, contact the Help Desk at huhelpdesk@howard.edu or 202-606-2020. 

What should I do if I receive an MFA-added email? 

If you still need to add a new device to your account, follow the instructions in the email.

We understand that changes in authentication procedures may raise questions or concerns. Therefore, our Help Desk team will be readily available to assist you with any issues or inquiries related to the new SSPR requirements or MFA device registration notifications. Please reach out to the HU Help Desk at huhelpdesk@howard.edu for assistance. 

We appreciate your cooperation and understanding as we strengthen our cybersecurity measures and safeguard the University's digital assets. Our top priorities are your security and privacy, and this enhancement will contribute to a more digitally secure environment for us all. 

In Truth and Service,

Enterprise Technology Services (ETS)