Service update: Introduction of Microsoft Authentication on AMS

We are introducing Microsoft authentication to strengthen and add another layer of protection to AMS for all users. Rather than relying on a password alone, users will also confirm their identity through the Microsoft Authenticator app. This additional step helps protect accounts if a password is guessed, stolen or otherwise compromised.

What will users need to do?

Each user will be notified upon their login to AMS that their password has expired and needs to be updated. If a user has a username that is an email format, they will also be prompted to update this username without the domain, as this is not compatible with Microsoft authentication.

The user will then update their password. Upon their next login to AMS, after entering their username, they will be taken to Microsoft to enter their password, download Microsoft authenticator and authenticate using the app. 

Step by step: 

1. User logs in to AMS and is prompted to update their password. User cannot navigate to any other tabs within AMS until this is update. If user logs out then back in, they will be met with the same page.
   
   
    
2. User updates password (and username if not compatible) and clicks ‘Change’.
    

3. Password updates, user is notified and logged out of AMS to log back in with their new password.

   
    

4. User enters username and upon clicking ‘Log in’, is directed to Microsoft to enter their new password. User enters password and clicks “Sign in”.

   
   5. “Let’s keep your account secure” User is instructed on the next steps to introduce multi-factor authentication.

   
   

   6. User installs Microsoft Authenticator 

   

   7. User scans QR code on the app

   

   8. User then clicks ‘Next’ on their computer screen. 2 digits appear on screen and text box appears in app to text two-digits for authentication. User enters two digits and page automatically updates to success page if it’s a match
   
   

   9. User enters 2 digits. Success message appears. User clicks ‘Done’ and is redirected and logged into AMS and lands on the AMS home page

   

   10. Upon their next login to AMS, the user will:

5. Enter their username
6. Log in
7. Enter password on Microsoft page

8. Click sign in 

   Login will be successful and user is redirected, logged in on AMS home page.