Identity Access Management (IAM) Initiative

The Identity Access Management (IAM) Initiative is initiated by the Information Security team of the Temerty Faculty of Medicine to improve the security and management of University of Toronto accounts such as Affiliate UTORids and UTORMFA.

The goal of this initiative is to strengthen our security identity through:

• UTORid Attestation: ensuring valid affiliate UTORid users continue to have access to U of T services.
• UTORMFA: to reduce the risk of account compromise
• Alternate email address for self serve password reset aimed at streamlining the password reset process.

The information security team at Temerty Faculty of Medicine is taking this step to strengthen its identity and access management controls and to better protect University services accounts and information from evolving cybersecurity threats. 

Over time, some affiliate UTORid accounts may no longer be needed. This initiative helps ensure that affiliate UTORid accounts remain active only when there is a valid business need, while increasing the adoption of UTORMFA to prevent unauthorized access to the University’s environment.

For most users, no.

A selected group of UTORid account users may temporarily lose access to the University’s services because their department affiliation is unknown until they contact their corresponding departments.    

To regain access to your U of T, UTORid account or other services, please contact the  department you are affiliated with at Temerty Faculty of Medicine.

UTORMFA is the University's Multi-Factor Authentication service

It requires users to verify their identity using an additional authentication method beyond their password. 

As the University of Toronto continue to strengthen its security and access to information, many applications now require UTORMFA as a mandatory requirement to access those services. Failure to activate UTORMFA will result to inability to access services or applications that require UTORMFA.

An alternate email address is required to support secured self-serve password recovery for your UTORid account. 

No. 

The alternate email is solely intended to support password recovery process.

Yes, provided that the alternate email address belongs to you and you are the sole person that has access to the email account.

Yes.  

UTORMFA enrollment is mandatory to access UofT systems and resources.

Yes.

As of Aug 07, 2026, there has been update UTORMFA sign in process.

Regular review of the UTORid validity is required to ensure that only individuals with a legitimate business need have access to UofT systems and environments. 

For all UTORid account information updates, please reach out to the contact person in the department which you are affiliated.

For all UTORMFA enquiries,

Visit Multi-factor authentication (UTORMFA) or contact the MedIT helpdesk medit.helpdesk@utoronto.ca

Please visit UTORid Management, go to the Password and Account Management section to update your email and other account information.

Yes.

UTORMFA enrollment must be completed for all applications and services that require it, even if they are accessed only occasionally. This helps protect University systems from unauthorized access

The primary contact in your affiliated department is responsible for confirming that your affiliation with the University of Toronto remains active and that your access to university resources continues to support legitimate academic, research, clinical, or administrative activities.

Yes, some affiliate UTORids currently have no expiry dates and are missing key information, including the UTORid holders’ contact email addresses and U of T sponsor details. MedIT has scheduled these UTORids to be disabled on November 30, 2026.

To help prevent unnecessary service disruptions, please cooperate with your affiliated  units by promptly responding to requests for information.