How to enroll in SSPR

Click the link to get started and then follow the videos (below):
https://aka.ms/ssprsetup

Note: If you are already logged into O365, you will be taken directly to the MS Security Info page to being the SSPR enrollment process.
Please use a laptop or a computer to enroll in SSPR and to change your password.

How to change your CUIMC password after enrolling in to SSPR

Enroll in Self Service Password Reset: DUO Application 

1. Using a laptop or a desktop computer, Go to https://aka.ms/ssprsetup and sign into your CUIMC account.
   • Note: Please don't use your phone for the above link. You will need it to scan the SQ code (see below).
2. If prompted, enter your full CUIMC email address and password. If you did not set up an authentication method, you will see More information required message. Click Next.
3. If you do not have a method set up, you will see a Keep your account secure message with links to set up the Microsoft Authenticator app as well as other options. Continue to step 4. If you see the Security info page, there is already a sign-in method set for your account; it will appear below the + Add sign-in method link (in the image below, you can see "Authenticator app" as an option that was already added.)
4. To add a sign-in method, click the + Add sign-in method link and use the drop-down window to select an option. If you want to delete an existing sign-in method, click the delete link to its right.
5. The Add a Method window will show. Select the dropdown ˅ button to open the dropdown menu and choose the Authenticator app option. Then click Add:
6. A window prompting you to download Microsoft Authenticator will show up. Your CUIMC account is configured to work with DUO. To use DUO instead of the Microsoft Authenticator app, select the I want to use a different authenticator app link in the window
   
7.  A Set up your account window will show up. Click Next.
8.  Next, you will see the Scan the QR code window, with a QR code to scan:
   
9. At this point, you will need to continue on your phone. Please follow the instructions below. The picture demonstrates an iPhone, but the Android setup is similar for Android. DUO has a very similar setup for Android phones. 
   Note: If this is your first time setting up DUO, please use CUIMC's MFA webpage to set up DUO first.

Continue on your phone:

1. Open the DUO app
2. Select the Add + icon at the top right corner:
   
3. From the Add account screen, select the Use QR code at the top of the screen:
   
4. Your phone screen will switch to the camera to allow you to scan the QR code. Scan the QR code on the computer screen, as indicated in step 8. On your phone screen, you will see white corners framing the QR code until it is captured:
    
5. Once scanned, you will see the Name account screen. You can name your account to a name that makes sense to you. You should also see a Windows logo in blue, indicating the account added is a Microsoft account.
   • Note: by default, your email address is going to be the new account name. Because you probably have several DUO accounts at this point with this account name, it's a good idea to delete the suggested account name and type a memorable name, like "SSPR account" or "Outlook account" etc.
6. The new SSPR account you just added should show at the bottom of the list. Tap the account to see more details and the Passcode. This is the number you will have to enter when prompted by SSPR. Note: There is no option for a "Push" notification option for this account!
   

You can tap the ellipses … on the top right corner of your account in DUO to move it up the list of your accounts, delete it, or rename it.

Add a second sign-in (authentication method): Phone

It is highly recommended that you use a secondary authentication method. This example will show you how to set up your phone number for authentication.

1. Follow steps 1 through 4 above to sign in and add another sign-in method. 
2. For step 5, select Phone as a sign-in method.
   Note: Do not select Alternate phone as a sign-in method, as this option will not be available to you in case you need to reset your password.
    
3. Continue following step 6 and onward above. When you finish, you should see the phone you've added to the list of sign-in methods. You can now have Microsoft SSPR service call you or send you an SMS with a PIN when you need to sign into your account.

Note for Android users: If you encounter an error saying the scanned code cannot be used, click the "X" at the top right of the QR window on the computer to close it, and then click "Add sign-in method" again on the computer. Try to scan the QR code again.