Upcoming changes to Multi-factor Authentication and StarID Password requirements
Dragon Community,
Minnesota State is making two important security changes beginning October 1, 2026. No immediate action is required for most users, yet we encourage you to review the changes below and prepare for upcoming multi-factor authentication (MFA) and password requirements which will further strengthen account protections. An attached pdf also outlines the content of this message.
1 – Changes to Multi-Factor Authentication (MFA)
Beginning February 1, 2027, Microsoft will discontinue MFA verification through text messages (SMS) or phone calls. Users who currently rely on these methods will be prompted to transition to the Microsoft Authenticator app.
What to Expect
October 1, 2026
- Users who currently utilize text message (SMS) or phone calls for MFA will begin receiving notices to switch their MFA method.
- Text message and phone call verification will no longer be offered to new users as MFA options.
January 19, 2027
- Affected users will be allowed a limited number of times to select “Skip for now” before they must set up a different MFA method.
February 1, 2027
- Text message and phone call MFA will no longer work. All affected users must have transitioned to a supported authentication method.
We encourage users to make the change as soon as they receive a prompt. Setting up the Microsoft Authenticator app only takes a few minutes and provides stronger account protection. Step-by-step instructions for updating MFA methods can be found in the Multi-Factor Authentication (MFA) knowledge base article on our service portal. Supported options include those methods available through the Microsoft Authenticator app, such as approval notifications, verification codes, and passkeys. If you cannot or prefer not to use a personal mobile device for authentication, contact 218.477.2603 to discuss another supported option, such as a physical security hardware token.
2 – Changes to StarID Password Requirements
Minnesota State is also updating StarID password requirements beginning October 1, 2026. The minimum StarID password length will increase to 15 characters to strengthen account security and align with best practices.
New or updated StarID passwords must:
- Be between 15 and 128 characters long.
- Include at least three of the following: uppercase letters, lowercase letters, numbers, and special characters.
- Not include your first or last name.
- Not reuse a previous password.
Current passwords will remain valid until they expire. You do not need to change your password on October 1. Your existing StarID password will remain valid until its schedule expiration date (180 days since your last password change). Password changes made on or after October 1, 2026 will need to follow the new requirements.
Once your StarID password meets the new requirements, regularly scheduled password changes will no longer be required, unless a reset is needed for another reason.
3 – Need Help?
For additional information about these changes, open a ticket with the IT Help Desk using one of the following: email support@mnstate.edu, call 218.477.2603, or use the portal at https://support.mnstate.edu .
Thank you,
Sandie
Sandie East, MBA (she/her/hers)
Campus Information Officer – Information Technology
MINNESOTA STATE UNIVERSITY MOORHEAD
Phone 218.477.2300
203A Livingston Lord Library
sandie.east@mnstate.edu | MSUM Information Technology