Student password and single sign-on
Passwords are vital to the security of your network account at Massey. You need your password to use Massey’s wifi, access your course material in Stream, search the library catalogue and access the student portal.
Single Sign-on uses your Massey login details to tell the system who you are. Once you have signed in with single sign-on, you can work across other Massey systems without needing to sign in again. This includes:
- Student Portal (SMS)
- Stream / Moodle
- MediaSite
- Library services
- Office 365.
Your student password does not expire.
Please always keep your password private. Do not write your password down and never respond to email requests for your password, even if the email appears to come from Massey University. These could be phishing attempts to steal your information.
Change your password
If you know your network password and need to change it, use passwordchange.massey.ac.nz
Self-service password reset (SSPR)
Students are already registered for SSPR. This allows you to reset your network account password on your own, anytime, from any device, without needing to contact support.
You do not need to connect to a Massey network or VPN to use this feature.
Use SSPR when:
- you forgot your password
- your password is not working, and you want to reset it.
If you cannot view the password reset page via http://passwordreset.massey.ac.nz or after clicking the Can’t access my account? link on the login screen, please contact us.
Authentication for SSPR
If you enter information for mobile phone or alternate email, it is not visible to other users. The only people who can see this data are you and the IT administrator. Only you can see the answers to your security questions.
Your alternate email address will only be used for the purpose of a self-service password reset. It will not replace your Massey email address.
If you do not have an alternative email address, you may select an authentication method that does not require an email address, such as mobile phone or security questions.
If you would like to get an alternate email address, you can easily sign up with free email service providers such as Microsoft, Google, and Yahoo!
Mobile app
The mobile app authentication will work without cellular and data service when not configured for notification mode.
Reset your password
If you have forgotten your password you can reset your password by:
1
2
Enter your student ID@massey.ac.nz (eg 12345678@massey.ac.nz).
3
Choose whether to receive a verification code through a text, a call, or an email to your alternate address.
4
Enter a new password.
Your password will be effective immediately.
If you have trouble resetting your password please contact us.
Password complexity requirements
Your password must:
- be at least ten characters long.
- contain characters from at least three of the following categories:
- English uppercase characters (A - Z)
- English lowercase characters (a - z)
- Numbers (0 - 9)
- Symbols # $ % ^ & * - _ ! = [ ] { } ‘ , . ? ` ~ " ( ) ;
Your password cannot:
- be a previous password
- use any of your names
- contain well-known words or phrases such as "Massey", "password" or any derivation
- contain the symbols @ | or :
Massey staff please note your password cannot contain the characters + \ / as these cause issues when using VPN.
When you need a student portal password
You will need a student portal password if you are a:
- Massey student who has withdrawn from all courses and reapplying
- Massey student accessing SMS after 6 months of a completed paper
- Applying to be a student
- Contractor
- Education Agent.
This password only gives you access to the student portal (SMS).
Multi-factor authentication (MFA)
Passwords can be stolen without you knowing. MFA adds an extra layer of security to your Massey network account to prevent anyone other than you from using it and accessing your personal information.
MFA relies on two methods or factors to verify your identity:
- Something you know, which is your account password
- Something you have, which is a mobile device or your home phone number
How does MFA work?
When you log in to single sign-on-enabled systems in Massey, you're prompted to enter your network username and password.
A Microsoft security feature starts in the background and evaluates the risks with the login attempt. It will determine if another authentication is required. Logins from a device you normally use are generally considered lower risk and will usually only require another authentication every month or so.
If needed, a prompt for authentication will appear on your screen. You may verify your identity according to your registered method, which could be through a text or call to your mobile device or a notification in the Microsoft Authenticator app. There is an option to call your landline if you do not have a mobile device.
When is MFA required?
You will need to verify your identity when logging in off-campus and when using single sign-on-enabled systems, accessing Office 365, or using virtual desktop services.
You don't need to verify your identity while on-campus and using a Massey device or signed into Massey wifi.
Setup MFA:
1
Go to mfasetup.massey.ac.nz
Click Next.
2
Choose which authentication method you prefer.
Authenticator app
The app is available for Android and iOS. We recommended this authentication method.
- You'll be prompted to download and install the Microsoft Authenticator app on your mobile device.
- Open the app on your mobile device.
- The first time you open it, you may be prompted with "Authenticator" Would Like to Send You Notifications.
- Click Allow.
Authentication phone
You will receive a text message or call on your mobile phone. If you do not have a mobile phone, you can choose to receive calls to your landline.
If you choose the authenticator app:
1
Sign in with your Massey account.
- Tap the + symbol
- Click Work or school account under What kind of account are you adding?
- Sign in using your Massey network login details
2
The QR code scanner will launch on the app.
- The first time you open the app, you may be prompted with "Authenticator would like to access the camera."
- Tap OK.
3
Scan the QR code shown on your computer screen.
4
If your camera is not working properly, you can enter the code manually
- Select Or enter code manually in your mobile phone screen
- Enter the code and the URL provided on the “Configure mobile app” page underneath the QR code on your computer screen.
If you choose an authentication phone:
1
Select Phone from the Method drop-down
2
Choose your country/region from the drop-down list and enter your mobile phone number.
3
Select the preferred method for your mobile phone – either Send me a code by text or Call Me, then select Next.
4
Follow the instructions provided on the screen, then select Verify.
How to log in if you don't have your phone, or if you have lost your phone
Contact IT support to get back into your account
If you have lost your phone please report it immediately to Te Paepoto, our national contact centre.
We will clear your device and its registration settings, so you will be prompted to register for multi-factor authentication again the next time you log in.
Register a new phone number
If you have a new phone number, update your security verification details so your verification prompts go to the correct location.
If you no longer have access to your old phone number, contact Te Paepoto, our national contact centre, so we can update your Massey account.
We will clear your device and its registration settings, so the next time you log in, you'll get a prompt to register for multi-factor authentication again.
Sign into a mobile device while travelling
You might find it challenging to use a mobile device-related verification method, like text messaging, while you're in an international location. It's also possible that your mobile device can cause you to incur roaming charges.
For this situation, we recommend you use the Microsoft Authenticator app, with the option to connect to a Wi-Fi hotspot.
Problems receiving a verification code
Not getting your verification code is a common problem typically related to your mobile device and its settings. Some possible things to try:
- Restart your mobile device
Sometimes your device needs a refresh. Restarting your device ends any background processes or services that are running that could cause problems, and it resets your device's core components if they crashed at some point. - Make sure your security information is correct
Make sure your security verification information is accurate, especially your phone numbers. If you put in the wrong phone number, all of your alerts will go to the incorrect number. Fortunately, that phone user won't be able to do anything with the alerts, but it also won't help you sign in to your account. - Check your notifications are on
Make sure your mobile device has notifications turned on and you've selected a notification method that allows phone calls, your authentication app, and your messaging app (for text messages) to send visible alert notifications to your mobile device.
Make sure you have a device signal and internet connection. Have a friend call you and send you a text message to make sure your phone calls and text messages are getting through to your mobile device.
If your mobile device is on, but you're still not getting the call or text, it's most likely a problem with your network and you'll need to talk to your provider. If you often have signal problems, we recommend you install and use the Microsoft Authenticator app on your mobile device. The authenticator app can generate random security codes for sign-in, without requiring any cell signal or Internet connection. - Turn off Do not disturb
Make sure the Do not disturb feature for your mobile device is not on. When this feature is on, notifications aren't allowed to alert you on your mobile device. - Check your battery settings
If you've set up your battery optimisation to stop lesser-used apps from remaining active in the background, your notification system has most likely been affected. To try to fix this problem, turn off battery optimisation for your authentication and your messaging apps, and then try signing in to your account again.
Using Authenticator for Android in the public cloud in China
The Microsoft Authenticator app for Android is available for download in China. However, as the Google Play Store is not available in China, you must download the app from other Chinese app marketplaces.
It is not currently possible to set up the Authenticator app as a two-step verification method using push notifications.