Body
Microsoft is phasing out SMS and voice phone call passcode delivery for multi-factor authentication (MFA) in Microsoft Entra (online account system), pushing organizations to adopt alternative phishing-resistent authentication methods.
The university currently permits most users to use these options for self-service password resets. To prepare for the upcoming changes and meet the necessary security requirements, your Warrior email account will be required to have a non-csustan email address for account recovery. This will eventually replace the phone number on your Microsoft account.
In our previous email, we had included Microsoft Authenticator as a valid option. However, this option is now under review and will not be considered until further notice.
When will the change happen?
OIT will be initiating a deadline for this change by November 30, 2026.
Who is impacted?
All users which include faculty, staff, and students with an active Warrior email account who require at least one of the two valid options.
How does this affect my current recovery method?
OIT will automatically add your preferred non-csustan email address to your Microsoft account. Once this has been completed, a new notice will be sent out which will include further information on how to verify the automatically added email address and update it if necessary.
If you have already added a non-csustan email to your Microsoft Account, you do not have to do anything at this time. When the updated notice is sent, you will be provided with a link to verify your current recovery information.