On March 31, 2027, Penn is updating how Two-Step Verification integrates with Microsoft services. While the Two-Step experience will remain largely the same, you will notice minor changes after rollout. You can expect a slightly different Microsoft sign-in flow plus a one-time reauthentication on all your devices.
Why This Change?
Penn is updating the technology used for Two-Step with Microsoft services to strengthen Penn’s ability to detect and respond to identity-based threats. This project is one of several PennKey security improvement projects underway.
What You Need to Know
- You’ll need to sign in again: After the update, your existing Microsoft sessions will end, and you’ll need to sign in again on all your devices.
You’ll see a slightly different Microsoft sign-in screen: After entering your username and password, a “Verify your identity” screen will appear (see below). Select “Approve with Penn Two-Step” to continue to the familiar Two-Step authentication process.
Image
Help & Resources
- Contact your IT Support Provider for help.
- For other PennKey security improvement projects, see the Protect Your PennKey website.
Support Providers – Information & Actions Needed
The following information and actions are for School/Center LSPs:
- Prepare for reauthentication of all PennO365 user accounts: Penn is moving from Microsoft’s legacy authentication integration to its newer External Authentication Methods (EAM) framework. As part of the rollout, all existing user Microsoft sessions will be signed out and will require reauthentication. Login screen change is described above.
- Communicate with your users: Distribute the ready-to-send communication below to PennO365 users in your School/Center beginning January 29, 2027 (two months before rollout) so they know what to expect and are prepared to sign in again after rollout. We recommend that after the initial message, you resend the communication to your users one month, two weeks, and one week before rollout so they receive it multiple times to ensure awareness.
- Download user communication
Help for LSPS
- LSP information sessions: Sessions are held every other Tuesday for LSPs from noon-1 p.m. To be added to the Teams invitation, contact Jeremy Gatens at jgatens@upenn.edu.
- For issues: LSPs may contact ISC Client Care.