[Answerland] FW: Important: Springshare Requires MFA on All Accounts on December 8, 2025

Thu Oct 16 10:08:08 PDT 2025

Hi All,

Please see this message about multi-factor authentication for all LibApps accounts, which will be required starting 12/8/25. This has already been in effect for Admin accounts. Please let me know if you have questions.

Gesse Stark-Smith, MIS (she/her)
Virtual Reference Coordinator
State Library of Oregon
gesse.stark-smith at slo.oregon.gov<mailto:gesse.stark-smith at slo.oregon.gov> | 971-600-4992
www.oregon.gov/library/libraries<https://www.oregon.gov/library/libraries>
Work Schedule: Mon 8-2, Weds & Thurs 8:30-4

[Logo for the Library Support & Development Services division at the State Library of Oregon]<http://www.oregon.gov/library/libraries>

From: The Springshare Crew <support at springshare.com>
Sent: Wednesday, October 15, 2025 9:40 PM
To: STARKSMITH Gesse * SLO <gesse.starksmith at slo.oregon.gov>
Subject: Important: Springshare Requires MFA on All Accounts on December 8, 2025

MFA Required on All Accounts Dec 8

Hello Gesse,

As mentioned in our recent blog post<https://blog.springshare.com/2025/10/upcoming-deadline-improve-security-with-multi-factor-authentication>, Multi-Factor Authentication (MFA) will be a required step for all users to sign into their LibApps accounts as of December 8, 2025. You are receiving this email because you are an Admin level user in a Springshare app and we want to provide you with advanced notice and information before we email all non-Admin level users to inform them of the upcoming requirement.

If you have already started requiring MFA for all users in your systems, we thank you for doing so. Please feel free to stop reading.

If you are using LibAuth to log in via your SSO, there is a section below describing how LibAuth is affected by the LibApps MFA.

If you have trouble accessing any links below, please log out of your apps, log back in, then try again.

________________________________
Timeline

You might remember our announcement in April<https://blog.springshare.com/2025/04/get-on-board-with-multi-factor-authentication> about MFA coming to LibApps. At that time, we knew MFA would be required for all users by the end of 2025, but we didn't have an exact date locked in. Well, now we have that date!

  *   October 2025 release (around the end of month) - An alert will appear on all non-Admin level user accounts' LibApps dashboards if they do not yet have MFA activated. This includes anyone using SSO.
  *   December 8, 2025 - All accounts are required to have MFA activated.

We understand this date won't be ideal for all of our customers. Coordinating a change that affects hundreds of thousands of accounts across the world is no small feat, and one we don't take lightly. If that date does not work for you, you are welcome to require it in your site on a date prior to December 8th that works better for your library.

  *   Learn how to require MFA of all accounts in your site(s)<https://ask.springshare.com/libapps/faq/3467#require-mfa>.
  *   Coordinate a good date (between now and December 8th) for your library and communicate that with your colleagues.
  *   Send them the resources linked in the next section so they can learn how to set it up for their account; be sure to explain that while information coming from Springshare will continue to say December 8, your date is sooner.

________________________________
How does this affect me?

All of the accounts in your systems are required to activate MFA by December 8, 2025. Management of MFA (as with all account management) resides at the local customer level. If a colleague needs help with MFA, a LibApps Admin can assist. Not all app Admins are LibApps admins, however. See the LibApps Admins section below to learn more.

Please work with your colleagues to make sure they're ready / aware of the requirement so there are no surprises when they log in that day and are asked to set up MFA. Here are links to both written documentation and videos that you can share to help with this process.

  *   Written Documentation: Activate multi-factor authentication for your account<https://ask.springshare.com/libapps/faq/3585>
  *   SpringyU: Setting Up Multi-Factor Authentication for Your Account<https://springyu.springshare.com/blocks/libapps/setting-up-mfa> (3.5 minute video)
  *   Training Recording: Activating Multi-Factor Authentication (MFA)<https://training.springshare.com/libapps/activating-mfa> (22 minutes)

If you haven't seen it yet, you should also check out the MFA Megathread on best practices and ideas<https://lounge.springshare.com/discussion/4461/mfa-megathread-best-practices-and-ideas> in the Lounge. The conversation, tips, experiences, and questions have already started - join us there!

LibApps Admins

If an account holder needs to remove MFA for any reason, they must ask a LibApps Admin at their institution to remove it from their account so they can create a new setup. If anyone writes into Springshare Support, we will direct them to their local LibApps Admins. Learn what they can do and how to see your list of LibApps Admins.<https://ask.springshare.com/libapps/faq/629>

Please make sure you have more than one LibApps Admin at your institution to ensure you can process these requests for your colleagues. Learn how to add or remove LibApps Admin permissions for a user.<https://ask.springshare.com/libapps/faq/670>

________________________________
SSO and MFA

Your LibApps system may require users to sign into LibApps with your SSO<https://ask.springshare.com/libapps/faq/2595> via LibAuth, or it might display both the LibApps and SSO login options<https://ask.springshare.com/libapps/faq/2577>. MFA for the LibApps login does not affect users who sign in via your SSO. Instead, you will follow the authentication requirements set by your SSO. If your SSO requires its own MFA, you'll complete it through your SSO. If it does not, you will not be prompted to use it when you log into LibApps. In either case:

  *   we encourage you to set up MFA for your LibApps account in case of a potential service disruption with your SSO
  *   your colleagues will continue to see the alert banner on LibApps pages until / unless MFA is set up in LibApps; we cannot turn it off based on whether you're using SSO

If you have SSO set up or opt to set it up at this point, please remember that requiring the SSO login for accessing the admin side of your apps means that our support team is more limited in the help we can provide. You will need to provide great detail in your descriptions / about your setups and as many screenshots / screen recordings as possible in order for our team to effectively help you troubleshoot. We thank you in advance.

________________________________

Thank you for your time and attention to the requirement of MFA on all LibApps accounts. If you have any questions, please let us know<https://ask.springshare.com/ask>.

The Springshare Crew

Springshare periodically sends operational emails to provide important information about changes to or issues with our apps and/or services to our customers, therefore there is no unsubscribe link.

Do not reply to this message, as replies are routed to an unmonitored mailbox. Contact our Support team <https://ask.springshare.com/ask> instead. Read our privacy policy <https://springshare.com/privacy.html> .

[https://libapps.s3.amazonaws.com/apps/common/images/springshare_email_footer_600.png]<https://springshare.com/>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://omls.oregon.gov/pipermail/answerland/attachments/20251016/2e53bff6/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 19516 bytes
Desc: image001.png
URL: <https://omls.oregon.gov/pipermail/answerland/attachments/20251016/2e53bff6/attachment.png>