OneLogin Resets: How to Reset OneLogin MFA and Passwords

by
Nametag Team
Nametag console showing a successful verification result

Enable Self-Service Account Recovery

Nametag sends MFA and password resets to self-service while protecting your helpdesk against social engineering.

OneLogin is a popular Identity & Access Management (IAM) provider that offers workforce identity and customer identity solutions. OneLogin has over 5,500 customers globally and has received broad industry recognition from analysts like Gartner and KuppingerCole, and on review sites like G2. OneLogin’s products include single sign-on (SSO), multi-factor authentication (MFA), identity lifecycle management, and advanced directory (synchronizes users from multiple directories such as Workday, Entra, Google, etc.)

Before now, self-service account recovery (SSAR) options for OneLogin were limited. To reset your own password, you needed to have your old password. To reset your MFA, you needed to have your old MFA device, or to have already created a backup 2FA option. None of these options offered a good experience, and all of them used outdated authentication methods that left a “back door” into any user’s account.

Now, thanks to Nametag Autopilot, secure self-service OneLogin resets are both possible and easy. Through Autopilot, OneLogin users can reset their own MFA and passwords through a flow that’s much more secure and efficient than default options.

Read on to learn how to reset a OneLogin password or MFA with default options, and how to do it with Nametag Autopilot.

OneLogin Password Resets: Default Methods

There are three default ways to reset your OneLogin password. The first default method prompts automatically and requires you to enter your old password and then a new password twice. The second default method requires you to still have access to your OneLogin account. The third default method is for OneLogin + ServiceNow specifically and requires you to have access to your email account, ability to receive a text message, or access to the OneLogin Protect smartphone app. If none of these methods work for you, you’ll have to contact your company’s IT helpdesk for support.

IT administrators should also note that email links and text message passcodes are easily intercepted via SIM swap, trojan, leaked credentials, and other methods. Also, authenticator apps can be exploited via push fatigue attacks which spam users into hitting accept.

OneLogin Password Reset Default Method 1

  1. Wait to be prompted on the OneLogin sign-in page 
  2. Enter your old password
  3. Enter a new password twice

According to a OneLogin datasheet, when your password expires in your company’s user directory, you will be automatically prompted to change your password from the standard OneLogin sign-in page. Simply enter your old password and then a new password twice.

OneLogin Password Reset Default Method 2

  1. Sign in to OneLogin, then navigate to your OneLogin profile
  2. Click on Personal Information, then click on Change Password
  3. Enter your old password and create a new one

If you still have access to your OneLogin account, you can reset your password by clicking on Profile under your name. On your profile page, click Personal Information, and then click Change Password. Enter your old password and create a new one. If you don’t see these links under Profile, your company’s IT administrator probably hasn’t enabled self-service password resets. In this case, you’ll need to contact your IT helpdesk.

OneLogin Password Reset Default Method 3 (ServiceNow)

According to OneLogin’s ServiceNow documentation, to reset your OneLogin password if you don’t have your old password but do have the OneLogin Protect app already set up or access to your email, go to the OneLogin sign-in page, click “Forgot Password”, then follow the instructions.

  1. Navigate to the OneLogin sign-in page
  2. Click on Forgot Password
  3. Enter your email address or user name, then click Continue. This will send an email to your specified email address, or the email associated with your username.
  4. If your OneLogin account is linked to the OneLogin Protect multi-factor authentication app, you will receive a one-time passcode to your smartphone. 
  5. If your IT administrator has configured SMS password resets, you may receive a reset code via text message to your phone number. Enter the code into OneLogin.
  6. Click on the link contained in the email you received or approve the push notification sent to your smartphone via the OneLogin Protect app. Then enter a new password, following the password parameters set by your company.

OneLogin MFA Resets: Default Methods

OneLogin multi-factor authentication resets are only possible for users who still have their old phone or who have already created a backup MFA option. Self-service may not be possible at all depending on your organization. Most likely, you will need to contact your company’s IT helpdesk to reset your OneLogin MFA for you.

For example, Chesapeake Public Schools requires you to have already created a backup by scanning a QR code within the OneLogin Protect app on your old phone. Carthage College requires you to create a helpdesk ticket via email, and then sign in to OneLogin with your username and password.

OneLogin MFA and Password Resets with Nametag

The default MFA and password reset options that come with OneLogin can be frustrating for users, forcing them to create expensive helpdesk tickets. They can also create potential security vulnerabilities, opening the door to account takeovers that lead to data breaches. 

Nametag Autopilot is the first complete solution for secure self-service OneLogin account recovery. Nametag’s user flow is faster, easier, and more secure than the default options that come with OneLogin. IT admins can get Nametag Autopilot up and running in under 10 minutes with our Admin Quick-Start Guide.

Here’s how to reset your own OneLogin MFA or password with Nametag Autopilot.

  1. Navigate to your company’s Nametag account recovery microsite. Enter your work email address, and then scan the QR code with your smartphone. This will launch the Nametag experience on your device.
  1. Follow the instructions to verify your identity with Nametag. Scan the front and back of your government-issued ID. You can use a driver’s license, passport, or any of over 11,000 other forms of government-issued photo ID.
  1. Take a selfie.
  1. Wait for Nametag to verify your identity and then authorize sharing of your information.
  1. Return to your microsite. You will now be able to reset your OneLogin MFA or password. Click “Reset multi-factor authentication” or “Reset your password” for OneLogin, then follow the instructions to reset your password or MFA.

Enhance OneLogin with Nametag

By surrounding OneLogin with Nametag, security-conscious IT and security organizations see huge benefits across security, cost savings, user experience, and operational efficiency.

2x better experience: Users love Nametag, because it’s much faster and easier than calling support for help, and they're able to get back into their OneLogin accounts more quickly.

50% fewer IT tickets: Helpdesk and support agents breathe a sigh of relief as they see ticket volumes drop thanks to self-service, liberating them to focus on delivering better service.

Higher security: Cybersecurity and risk teams sleep better, knowing they’ve remediated a potential vulnerability that can lead to account takeovers, data breaches, and ransomware.

30% cost savings: Executive and finance teams see helpdesk and support costs drop by deflecting IT tickets to self-service, freeing up valuable resources.

Watch a demo of self-service account recovery with Nametag Autopilot, then get in touch to start automating your OneLogin password and MFA resets.

Secure your helpdesk against social engineering and impersonators.
Decline
Accept All Cookies