Share:

March IAM Update: Secret questions, RapidIdentity, and Miami accounts

As Miami works toward deploying our new IGA tool, RapidIdentity, we are making some back-end decisions and getting the tool ready to ingest and act on all Miami accounts. (For those curious, there are more than 30,000 accounts in our system that will be managed by RapidIdentity in some way.)

One of the upcoming changes is to the password recovery functionality for Miami accounts. Right now, Miami systems allow you to set three recovery options in the event that you forget your password: phone number, personal email, and secret questions.

Unfortunately, secret questions can present some amount of risk to an organization, because common answers are easy to deduce or guess, especially because many organizations use the same questions. In the interest of making sure we’re prioritizing the security of our data, we are taking this into account: Our new system will not allow you to use a secret question as one of your recovery options.

What does this mean for me?

Most Miami users already have password recovery options set that include phone numbers and personal email addresses. However, for those who don’t have any password recovery methods for your Miami MUnet password, or have a secret question as your only password recovery method, you have a task ahead of you.

As of the go-live date of the new IAM platform, if you forget your password and want to reset it yourself, you will need to have a valid self-service password recovery method. Those include:

  • Phone number
  • Personal email address

How do password recovery options work?

If you need to reset your Miami MUnet password for any reason (e.g., your account has been compromised or you forget your password), we ask that you have password recovery options to verify your identity. This means that you have a phone number that can be texted or an email address (NOT your Miami one) that can be used to verify that you are who you say you are when trying to reset your password.

Please note: After the go-live of RapidIdentity, secret questions will no longer be an option.

After this date (TBD), if you do not have a recovery option set or a secret question remains your only option, you will have to call IT Help to reset your password. That will include needing to show proof of identity – in other words, emailing a scan of your license or other government-issued identification to the support desk.

What should I do?

Please take the time now to go to MiamiOH.edu/password and make sure you have at least a phone number or personal email address listed under your password recovery options. It’s quick and easy, and will keep you from having to call IT Help later!

TL;DR: Password recovery edition

After the TBD go-live date of RapidIdentity, secret questions will no longer be an option for password recovery for your Miami account. Please take the time now to go to MiamiOH.edu/password and make sure you have at least a phone number or personal email address listed under your password recovery options. It’s quick and easy, and will keep you from having to call IT Help later!

MiamiOH.edu/password