• Please note that, with immediate effect, multi-factor authentication is required for M365 guest accounts.
• The configuration change by Microsoft described below will take place during calendar week 33.

• SB: Microsoft OneDrive for Business - Tenant KIT0: "KIT - Karlsruhe Institute for Technology" (Heimatorganisation der Mitarbeitenden)
• SB: Microsoft SharePoint Online - Tenant KIT0: "KIT - Karlsruhe Institute for Technology" (Heimatorganisation der Mitarbeitenden)

• Starting in July 2026, SharePoint Online One-Time Passcode (OTP) authentication will be gradually retired.
• The transition is expected to be completed by August 31, 2026.

• External users who already have a Microsoft Entra B2B guest account will not be affected by this change.
• External users who do not yet have a Microsoft Entra B2B guest account may no longer be able to access content that was previously shared with them after the retirement begins in July 2026. In this case, an access denied message may appear.
• To restore access, it is sufficient to re-share a file or folder with the affected user using the same email address. This creates the required guest account.
• If an external user uses multiple sharing links, re-sharing a single item is sufficient. After that, all previously shared links for this user will work again.

DESCRIPTION:
The following changes/features are included in the new release
* Document upload/download revised for future processes
* “Domain Registration” process implemented
* Multilingual support (German/English)
* External access via OTP prepared for future processes

AFFECTED:
* Individuals involved in the processes
* Request to renew a user account
* Request to grant permissions for the User Portal (UP)
* Request to set up a functional email address @kit.edu
* Request to set up a website
* Applicants and approvers of pending processes

IMPACT:
During the maintenance period, no new requests or processes can be created or edited.

DESCRIPTION
To enhance security, from 7 August 2026, two-factor authentication (2FA) will be also required when signing in to M365 and Azure services using M365 guest accounts.

AFFECTED
The change affects all M365 guest accounts.
This means that this change applies to people invited to Microsoft Teams at KIT who have their own Microsoft account in a different home organisation, who have a private/personal Microsoft account, or who have been invited without a Microsoft account.

Multi-factor authentication for these M365 guest accounts must be set up once to ensure that users can log in and access shared data at KIT.

NOTE
Information and guidance for this group of people can be found at https://www.scc.kit.edu/en/services/m365guests.php Multi-factor authentication for these M365 guest accounts must be set up once.

DESCRIPTION / REASON
To increase security, two-factor authentication (2FA) will be required when logging in to M365 and Azure services with KIT accounts, similar to logging in to SAP and campus management services.

AFFECTED
This necessary change affects all active student accounts at KIT (uxxxx@student.kit.edu). Accounts of staff, visitors and partners were already changed in 2025.
IMPACT
For KIT accounts, it will only be possible to log in to Microsoft M365 and Azure services with a valid token.

NOTE
If you do not yet have a token for your KIT account, you can set one up in the token management section of the SCC self-service portal.
For information on setting up 2FA for your account, see the service description "Passwordless login and two-factor authentication (2FA)".
People who can already successfully log in to the User Portal (UP) or Campus Management with 2FA do not need to do anything else and can use the tokens already set up at my.scc.kit.edu (HW tokens, smartphone tokens, or passkeys).