With the transition to Okta for identity and access management at U-M, a new account lifecycle has been introduced in order to reduce security risks associated with inactive accounts.
Keeping Your Account Active
You are required to sign in to your UMICH or Friend account at least once a year in order to retain access.
- 6 months since your last sign-in — risk level of the account is elevated. Additional Okta Verify prompts may be required.
- 9 months since your last sign-in — a first reminder email is sent.
- 13 months since your last sign-in — a second reminder email is sent.
- 14 months since your last sign-in — your account will be suspended and will require assistance from ITS to reactivate, but permissions will be retained.
- 19 months since your last sign-in — your account will be deactivated and all permissions will be removed. Obtaining a new affiliation or reactivating your account with help from ITS will initially grant access to standard services only.
Note: Accounts with privileged access or service accounts used for critical business functions may have different requirements. The mechanisms for attestation of these accounts are still in development.
