Your Account

New Students and Swansea University IT Account Information

Introduction

You are required to set up Multifactor Authentication (MFA) so that your account is secure. MFA allows you to verify your identity using security information or authentication methods. It is a required step in setting up and maintaining your account.

Setting up MFA to prove your identity will also allow you to reset (in the case of a forgotten password) or change your password by using Self Service Password Reset (SSPR) at any time without needing further assistance.

To complete this process, you will need to know your student email address and temporary password.

The first method you set up will become your default method. The recommended default method is the Microsoft Authenticator app.

We strongly advise that you add a second method, such as text notifications, so that if you are unable to use your default method you can still gain access to your account, without the need to contact us for support. Please see the Set Up a Second Method section for further guidance.

If you require further assistance, please contact the IT Service Desk. Please note that for calls relating to account security, you will need to phone us on 01792 604000 so that we can verify your identity.

Microsoft Authenticator Updates

Microsoft Authenticator Number Matching

On the 9^th of February the Microsoft Authenticator application will change.

A new feature called ‘Number Matching’ is being introduced by Microsoft. This means that instead of seeing the Approve or Deny option on your mobile device you will be asked to match the number that appears on your screen to approve the request. You will still be able to deny the request if it appears when you have not tried to login. The screenshot below shows what you will see on your screen and on your mobile device.

A screenshot showing a prompt featuring a two-digit number on one screen and another mobile screen that is requesting that number is entered into the box. A No, it's not me option is also visible

In addition, the ‘Show App’ function will now show you the name of the application that is requesting your authorisation. This will help you to verify that you are only providing access to that application. Some services are not named so will still produce the Approve or Deny prompt. An example of this is our RDP service which will not ask you to match a number.

A screenshot showing a prompt with the app name OfficeHome and the option to approve or deny

Apple Watch Support for Microsoft Authenticator

In the upcoming Microsoft Authenticator release in January 2023 for iOS, there will be no companion app for watchOS due to it being incompatible with Authenticator security features. You won't be able to install or use Microsoft Authenticator on Apple Watch. We therefore recommend that you delete Microsoft Authenticator from your Apple Watch, and sign in with Microsoft Authenticator on another device.

Before Logging In

Before you login to your account for the first time, you should download the Microsoft Authenticator app on a mobile device e.g., a smart phone or tablet, and not the device you will usually use to work or study e.g., your PC or laptop.

Please make sure that you have notifications enabled on your mobile device.

The Microsoft Authenticator app is available in both the Google Play and Apple App Store. The icon, when downloaded will look like this:

The logo for the Microsoft Authenticator app. It has a blue background and a white padlock image

For MFA to work, the Microsoft Authenticator app must remain installed on your device. If you uninstall it, and you do not have a backup authentication method set up, you will not receive the prompts required to verify your identity.

Login

The first time you login, you will need to use your University student email address (your student number @swansea.ac.uk) as the username and the temporary password already provided to you.

You should login to your account for the first time by going to myuni.swansea.ac.uk and clicking on the Login icon.

A button featuring the text Login

After logging in successfully, you will be asked to change your password. This is not optional. Set a strong password with at least 8 characters that is meaningful to you, but hard to guess.

Here are some tips for setting strong passwords:

• Choose a mixture of 3-4 words

• Do not use a single word (e.g., Swansea)

• Do not select a weak password (e.g., containing the words password, swansea or other words associated with you such as family names)

• Do not use a commonly used phrase (e.g., letmein)

If you do not set a strong enough password, it will be rejected. Your password will not change and you will be invited to try again until it meets the requirements. The guidance above should allow you to choose an appropriate password.

Setting Up Multi Factor Authentication

You should have already downloaded the Microsoft Authenticator app, logged in for the first time and changed your password before reaching this stage.

This method is easiest to follow if you use a laptop to log into your account and have the Authenticator app on a mobile phone (or other mobile device such as a tablet) to hand.

As you login you will receive a More information required prompt. Click Next.

A dialogue box reading More information required - your organisation needs more information to keep your account secure. There are options to Use a different account, Learn more or click Next

As you have already installed the app, you can click Next on the following screen too.

A screenshot of a Keep your account secure dialogue box that reads Start by getting the app

Open the Microsoft Authenticator app.

You may need to allow notifications if this is not already enabled. Add an account and select the Work or School option.

Click Next on the login screen to acknowledge setting up your account.

A dialogue box titled Keep your account secure. There is a button for Next

Your authenticator app screen will change to a QR code scanner. Scan the QR code on the screen.

It will confirm connection and send a test notification.

From February 9th 2023 the Microsoft Authenticator app will ask you to verify your identity by entering a number that you see on screen into your Authenticator app. Entering the correct number will confirm the login.

A screenshot showing a prompt featuring a two-digit number on one screen and another mobile screen that is requesting that number is entered into the box. A No, it's not me option is also visible

If you enter an incorrect number or click the No, it's not me option the login will be denied. You will be given an option to request another request.

A screenshot of a denied Microsoft Authenticator prompt with an option to request another request

Please note: you will only receive a notification if your password is correct. If you receive prompts when you are not trying to log in, please change your password as your account details may have been compromised.

Set Up a Second Method

After you have set up your Authenticator app, it is strongly recommended that you add a second method.

To add a second method, login to MyApps and select Secure My Account. You will receive an MFA prompt. You can then use the Add Method option under your Security info and follow the instructions.

You can also choose to delete a method (for example, a phone number you no longer use) and change your default option. We recommend using either the Microsoft Authenticator – notification or phone call options as these allow you to use the Remote Access PC service.

A screenshot of a Security Info page. The Default sign-in method is Microsoft Authenticator - notification. A redacted phone number is also featured

Please note: if you intend to change your device or phone number, please ensure you have added a backup / secondary method so you can access to your account.

Changing Your Password

After you have setup MFA you will be able to use Self Service Password Reset (SSPR).

If you have forgotten your password or expect that your details have been compromised, please use this link: https://passwordreset.microsoftonline.com/

If you know your password but would like to change it, please use this link: https://account.activedirectory.windowsazure.com/ChangePassword.aspx

Further Assistance

If you need further assistance or advice on other authentication methods, please contact the IT Service Desk.

Existing Students IT Account Information

You can control your MFA methods at any time by logging in to MyApps and selecting Secure My Account. You will receive an MFA prompt.

You can then use the Add Method option under your Security info and follow the on-screen instructions. You can also choose to delete a method (for example, a phone number you no longer use) and change your default option. We recommend using either the Microsoft Authenticator – notification or phone call options as these allow you to use the Remote Access PC service.