QMed Accounts - MFA Reset

Modified on Fri, Nov 15 at 10:22 AM

Prerequisites

To manage QMed accounts you must have your own QMed account and have admin rights to manage accounts.

As of July 2024 the following QHS IT users have admin rights:

Samantha Lusk

Alice Rush-Rhodes

Matt Simpson

Kasia Turmel

Verify Identity and Establish Communication Channel

If you are assigned a Freshdesk ticket related to QMed accounts, the first step is to ensure we have a reliable way to communicate with the constituent other than their QMed account.

Check the sent from address of the Freshdesk ticket. If the email has come from a QMed account and concerns a password reset (e.g., they are locked out due to non-compliance with MFA requirement), the user may still be able to access their account on their phone. Write back and ask for an alternate email since once a password update is made to their QMed account, they will no longer be able to access it on their phone (or other device).

If the email has come from the user’s queensu.ca address, move forward.

If the email has come from another address (e.g., google.ca), we need to verify the identity of the sender before giving them access to the Qmed account through a password reset or similar.

Ask them to confirm netID.
Check if they have an Elentra account or Common Credentialing account with another email that we can use to send any reset information.

Access QMed Account Manager

Access Chrome Consul at https://admin.google.com
Log in
On the Users card, click Manage.
Search for a user by name.

Change MFA Requirement

After accessing a user, click the Security tab.
Scroll down to 2-Step Verification. Verify that their 2-step verification is off.
Click Change Security Settings. This will redirect you to the Security 2-Step Verification settings.
Update the On as of date and set it to a date in the future (i.e., 2 days later).
Click Save.
Write back to the constituent on Freshdesk and provide a link to the instructions for implementing 2-step verification. Make sure to inform them of the deadline to enable 2-step verification.

Notes:

If a person tries to log in while 2-step verification requirement is ON, and they don't have 2-step verification enabled, they get locked out of their account and will require a password reset.
After you change the MFA requirement, a user will receive a prompt to configure MFA on sign in (but the user can ignore so you really have to emphasize to them to act within the defined time frame).