Identity and Access Management

MFA stands for "Multi-Factor Authentication". For authentication, a factor is a way to confirm you are an authorized user. In the past, most authentication was done solely with a username and password. The password was the factor being used.

This article informs a local unit administrator how to create security groups for shared Resources in CampusAD using Active Roles 8.x

This article provides a departmental computers checklist to be used prior to migrating to MSU CampusAD.

MSU graduates, former students, former employees, or retirees can have their MSU NetID disabled. Current MSU Faculty, Staff, and Students are not allowed to disable their official MSU NetID.

Information about obtaining your MSU Spartan Card and where to find additional information if you have questions or concerns.

This article provides information on how a departmental IT Support staff member can load and use tools to manage the Active Directory for their organizational unit if they are part of the MSU Campus Active Directory (CampusAD)

The ID Office maintains NetIDs and has instructions how to activate on their website, which this article links to.

The ID Office maintains current instructions for how to activate your NetID.

The ID Office maintains the process to change NetIDs. They have a form (linked in this article) you can use to request the change.

FPID based NetIDs are issued for certain populations and are intended to be short term and temporary.

Certain legacy authentication systems (ie, not using auth.msu.edu) do not handle leading numbers in the password.

This document define what access to supported services a user may have with their MSU NetID, based on the affiliation categories listed.

Spouses are not eligible for NetID services on their own. However, surviving spouses of vested MSU Faculty, Staff, and Retirees are eligible for their own NetID.

Document containing details for SIS roles that can be requested through the Access Request system.

Following these steps will connect a security key or biometic authenticator as a MFA credential to your account, allowing you to connect to resources that require MFA.

Following these steps will connect your phone (using SMS or voice calls) as a MFA credential to your account, allowing you to connect to resources that require MFA.

Following these steps will connect Okta Verify as a MFA credential to your account, allowing you to connect to resources that require it.

Following these steps will switch your Okta Verify MFA credential from one phone to a new one.

This article explains how a departmental IT Support staff member can add directory columns for additional search, sort, and display options

This article provides information on how a departmental IT Support staff member can create a group using the Quest ActiveRoles Tool.

If you are the administrator for an organization (department, college, or administrative unit) and are moving staff email, computers and servers into CampusAD you should request an Organizational Unit (OU) be created for your unit in CampusAD.

The password can be reset on the website. If a student does not remember their current password to chemistry.msu.edu, they will need to email itstaff@chemistry.msu.edu for assistance.

Following the steps below will help you locate your ZPID in Enterprise Business Systems (EBS), which you may need for verification or registration purposes.

This article covers the basic steps for requesting access to a system or application coordinated by MSU Information Technology's access management process. These access requests in TeamDynamix have replaced the eARM application (https://earm.itservices.msu.edu).

These passwords need to be reset from the myalumni.msu.edu page. The IT Service Desk does not have access to reset these passwords.

Following these steps will allow you to modify how your information appears in the directory, or prevent it from appearing at all.

Some users may have different usernames for their HC or MSUFGP domains as opposed to the general MSU domain. This process allows the usernames to be synced.

This article describes how to reset a NetID password.

This article describes how to reset their network password which includes CPS, Health Sciences Email, VDI, Clinic PC login, Citrix login, Webaris, Docutrak, and Thin Clients.

Following these steps will set a non-MSU email address as a backup email so you can reset your NetID password without any outside assistance.

Following these steps will help you locate your APID / Student Number in SIS Campus Solutions, which you may need for verification or registration purposes.

Information on how a local administrator creates a room resource for use in Office 365.

Following these steps will help you locate your student APID in the StuInfo system, which you may need for verification or registration purposes. StuInfo is the system that was replaced by SIS Campus Solutions.

Imprivata stores passwords to facilitate easy authentication to various systems. This article covers how to update a password stored in Imprivata.

In order for Okta to verify an account, the time on the phone must be synced properly to a time server. If not, the user will receive "invalid token" error.

When you attempt to register for Okta MFA, you receive an error: "Invalid Token Provided". Your Okta account is likely stuck in Staged mode, and must be manually activated from the Okta admin console.

When trying to reset a NetID password, you receive an error saying "Password requirements not met".

The "Do not challenge me on this device for the next 24 hours" checkbox during an Okta login does not save the setting, and does not prevent future 2FA challenges on the same device.