[Translate to Englisch:] MFA Recovery
If all of your stored MFA methods are no longer available (e.g., due to loss), you will need to reset your MFA.
The reset process differs depending on the user group - for employees and students. Please select the step-by-step instructions that apply to you.
Employees can use a temporary access pass to log in to the Microsoft administration portal in the event of loss of all MFA methods and to delete and re-enter existing MFA methods.
The temporary access pass is valid for 48 hours after issuance and can be used multiple times within this period.
- Employees can obtain the access pass by contacting ZIM IT Support.
To reset your MFA methods, please contact ZIM IT Support by email. Send the message from your private email address registered with the university. Please include the following information in your email:
- Your employee ID.
- Your work email address.
- A brief description of the problem (e.g., smartphone defective/authenticator app unavailable).
ZIM IT Support will provide you with a temporary access pass. With this access pass, you can then view your stored MFA methods in the “Microsoft Security Information” area, check existing methods, and store a new MFA method if necessary.
To do so, follow the instructions at the following link: Use temporary access pass.
If you have set up the Authenticator app as the only multi-factor authentication (MFA) method for your student account and this app is currently unavailable, e.g. because your smartphone has been lost, stolen, is defective, or is being serviced, you will need a temporary access pass to re-register the stored MFA.
As a student, you can create a temporary access pass via the 24-hour password service. Do NOT contact ZIM IT Support to issue the access pass.
The temporary access pass allows temporary access to your university account or the university's Microsoft account without the need for second-factor authentication.
Important: In order for an access pass to be created, a private email address or mobile phone number must first be stored in the 24-hour password portal. This is the only way the confirmation code can be delivered.
Procedure for issuing a temporary access pass:
- Log in with your university password on the 24-hour password service page in the MFA reset area.
- Select the option to send the PIN via SMS or email.
- Enter this PIN in the portal.
- Add your campus card number and date of birth to the entry.
- After successful verification, a temporary access pass will be displayed.
With this access pass, you can then view your stored MFA methods in the “Microsoft Security Information” section, check existing methods, and store a new MFA method if necessary. To do this, follow the instructions for using a temporary access pass.
Please save the access pass. It cannot be displayed again after closing the page.
The temporary access pass is valid for 48 hours after issuance and can be used multiple times within this period.
A temporary access pass is a temporary password. It allows users who temporarily no longer have access to their authentication methods, such as the authenticator app on their mobile device, to regain access to Microsoft 365 applications and services for a limited time.
The access pass can be used to log in to the Microsoft portal and delete and re-enter existing MFA methods (e.g., in the event of a smartphone being lost).
The temporary access pass is valid for 48 hours after issuance and can be used multiple times within this period.
- As a student, you can create the temporary access pass via the 24-hour password service.
- Employees can obtain the access pass by contacting ZIM IT Support.
As a user, you have received a temporary access pass. Go to the Microsoft portal at: aka.ms/mysecurityinfo.
Open the Internet address and then enter the temporary access pass in the dialog box. Then click on the Log in button.
Under “Security Information,” you will see your newly created temporary access pass. If, for example, you can no longer use your mobile device with the stored authentication methods, you can delete these devices here and set up new methods. You can then delete the temporary access pass again. The temporary access pass is automatically removed from the overview of login methods after it expires.
Share this page
