1 of 20

1

End User Guide for HQ Staff

For Edupass

16/10/2026 V0.1

This guide is for MOE HQ officers, who sign in with their WOG account (name@moe.gov.sg). School staff and students sign in differently and have their own guides.

2 of 20

2

Versioning

Version

Updated (YYYY-MM-DD)

Changes

v1

2026-10-12

First draft for HQ staff: what Edupass is, logging in, 2FA set-up, password reset, access, FAQ

3 of 20

3

Table of contents

4 of 20

0. What is Edupass?

5 of 20

4

0. What is Edupass?

Edupass is MOE's new login system for MOE applications, built in-house by MOE DXD.

It is replacing MIMS app by app, not all at once.

As an HQ officer, you sign in with the WOG account you already use for your laptop and email.

More Secure

Two-Factor Authentication (2FA) adds an extra layer of protection

Passwordless sign-in reduces password-related risks

Faster Log In

Stay signed in through the day across MOE apps, with fewer repeat logins

Simpler Access

Sign in to MOE apps with your WOG account (name@moe.gov.sg)

6 of 20

For HQ Staff

5

0. Which account to use

App

Sign in with

Most MOE apps that use Edupass

Your WOG account (name@moe.gov.sg)

Secure SharePoint and mCare

Your MIMS/Edupass credentials (name@hq.moe.gov.sg). Detailed steps to follow

iCON (Google mail)

Your WOG account, after one extra step (see 1e)

Apps already on Edupass include All Ears, MySCI, MySkillsFuture and SDIS. More move over the coming months, including iCON and SLS.

You will see a Login with Edupass button on any app that has moved. Where an app still uses MIMS, keep logging in as before.

7 of 20

6

1. How to log in with Edupass

​

​

1a

1b

1c

1d

1e

Do I need to approve on my phone?

Where you are

Phone approval?

COMET laptop connected to ZScaler

No, except when signing in to a privileged account

COMET laptop not connected to ZScaler

Yes

Personal device

Yes

8 of 20

For HQ Staff

7

1a. How to log in to MOE apps on COMET (connected to ZScaler)

No phone approval is needed on a COMET laptop connected to ZScaler.

1. Log in to device

Log in to your COMET laptop with your WOG account (name@moe.gov.sg) and connect to ZScaler

2. At any MOE app that uses Edupass to log in

2a. Select Login with Edupass

2b. If prompted, enter or pick your WOG account (name@moe.gov.sg)

3. Success!

You are signed in.

Asked to approve on your phone?

Check that you are connected to ZScaler. If you are not, follow 1b.

A privileged account always asks for phone approval: follow 1c.

9 of 20

For HQ Staff

8

1b. How to log in to MOE apps on COMET (not

connected to ZScaler), or a personal device

On a personal device, or COMET not connected to ZScaler: have both your mobile device and your computer ready.

1. Log in to device

Log in to your laptop or device

2. At any MOE app that uses Edupass to log in

2a. Select Login with Edupass

2b. If prompted, enter or pick your WOG account (name@moe.gov.sg)

3. Phone approval

[On your computer] A two-digit number appears on screen

[On your phone] Tap the push notification

[On your phone] Key in the two-digit number and tap Approve

4. Success!

You are signed in.

1

2

3

10 of 20

For HQ Staff

9

1c. How to log in to a privileged account

A privileged account always needs 2FA. You will require Microsoft Authenticator on your phone.

1. Log in to device

Log in to your laptop or device

2. At any MOE app that uses Edupass to log in

2a. Select Login with Edupass

2b. If prompted, enter or pick your WOG account (name@moe.gov.sg)

3. Phone approval

1

[On your computer] A two-digit number appears on screen

2

[On your phone] Tap the push notification

3

[On your phone] Key in the two-digit number and tap Approve

4. Success!

You are signed in.

11 of 20

For HQ Staff

11

1d. How to log in to iCON

Coming soon!

12 of 20

For HQ Staff

10

1e. How to log in to Secure SharePoint and mCare

Coming soon!

13 of 20

For HQ Staff

12

2. How to set up 2FA with passwordless sign-in with Edupass

Your WOG account (@moe.gov.sg) would have been onboarded to Microsoft Authenticator and passwordless sign-in as part of onboarding to COMET. The below steps only apply if you have not previously onboarded to COMET, or is setting it up again (e.g. new phone). ��To set up Microsoft Authenticator and passwordless sign-in for your WOG account, follow the set-up guide.

Use Microsoft Authenticator rather than another authenticator app: Google Authenticator works only with a 6-digit code each time and cannot do passwordless sign-in.

14 of 20

For HQ Staff

13

3. How to reset your password

Reset it yourself with Microsoft Authenticator

1. Go to the Edupass sign-in page

2. Click Forgot my password

3. Follow the on-screen steps and verify with Microsoft Authenticator when asked

​

If that does not work, contact the EUSS service desk (section 6).

You do not need to change anything in Microsoft Authenticator after a password change.

15 of 20

For HQ Staff

14

4. How to request and manage access

Request, view and remove your own access in MIMS as before (MIMS End User Guide, slides 36 to 45). This is coming to Edupass soon. Everyone gets a basic level of access automatically.

Requesting extra access: submit the request yourself. It is routed to your Approving Officer (AO) automatically, so you do not need to find them.

Need help making a request: contact your Local Administrator (LA). Find yours in the MIMS LA and AO list.

16 of 20

For HQ Staff

15

5. Frequently Asked Questions: Login 1/2

1. Which account do I use?

Your WOG account (name@moe.gov.sg) for almost everything. Use your MIMS/Edupass account (name@hq.moe.gov.sg) only for Secure SharePoint and mCare.

​

2. Why can't I use my WOG account for Secure SharePoint and mCare?

They are M365 services that are for the school network. Kindly use your MIMS/Edupass account (name@hq.moe.gov.sg) instead.

​

3. iCON shows a Google sign-in page. What do I enter?

Your iCON mailbox name (name@moe.edu.sg). You are then taken to the Edupass page, where you sign in with your WOG account.

​

4. Why am I asked for a phone approval on my COMET laptop?

You are either not connected to ZScaler, or you are signing in to a privileged account, which always asks for phone approval.

17 of 20

For HQ Staff

16

5. Frequently Asked Questions: Login 2/2

5. When will Edupass replace MIMS for all MOE apps?

App by app, not all at once. Where an app still uses MIMS, keep logging in as before. Refer to https://edupass.moe.edu.sg for the latest list of apps onboarded to Edupass

​

6. I get an error screen when logging in.

Follow the on-screen instructions and try again. If it persists, contact EUSS (section 6) with: that you are MOE HQ staff, your user ID, a contact email, the app you were logging in to, what happened, and a screenshot.

​

7. Login fails because of an earlier attempt.

Open Microsoft Authenticator, tap No, it's not me on the open request, then log in again.

​

8. I set up Microsoft Authenticator but not passwordless sign-in. Must I type my password every time?

Yes. Turn on passwordless sign-in (section 2).

18 of 20

For HQ Staff

17

5. Frequently Asked Questions: 2FA

9. I have changed my phone and need to set up 2FA on my new phone

​

Scenario 1: If you still have access to the Microsoft Authenticator app that was on your old phone and had not removed it from your account first:

​

Go to myaccount.microsoft.com. You will be prompted to login.

  1. A verification window will appear. Enter the 2-digit code displayed on screen onto our existing Authenticator app on your old phone.
  2. Once logged in to the “myaccount” page, on the left panel, click on ‘Security Info’. A verification window will appear. Again, enter the 2-digit code displayed on screen onto our existing Authenticator app on your old phone.
  3. On the Security info page, click Delete the old Microsoft Authenticator. Click ‘Ok’.
  4. Follow instructions in ‘Set up the Microsoft Authenticator App’ to complete the setup on the new mobile phone.
  5. If you are unable to complete the setup on a new mobile phone, please log a case through EUSS (section 6).

​

Scenario 2: If you are prompted to enter a verification code or number, but no longer have access to the Microsoft Authenticator app on your old phone:

​

Please contact the EUSS (section 6) and request 2FA revocation. Once 2FA is revoked, you will be able to set up Microsoft Authenticator again.

19 of 20

For HQ Staff

17

5. Frequently Asked Questions: 2FA

10. I am unable to install MS Authenticator on my device

MS Authenticator is available for iOS and Android devices from their respective app stores. As of Jan 2026, MS Authenticator is not supported on PC and Mac devices, and no longer supports Authenticator versions that are more than one year old. Always keep your device and the MS Authenticator up to date. You may refer to this link to check on the latest requirements. https://support.microsoft.com/en-us/account-billing/download-microsoft-authenticator-351498fc-850a-45da-b7b6-27e523b8702a#id0ebbj=ios

​

11. There is no passwordless sign-in option in my Authenticator.

Please ensure you have set up Microsoft Authenticator. Passwordless sign-in option is only available on Microsoft Authenticator. �If you are on Microsoft Authenticator, go to Security info at myaccount.microsoft.com, delete the existing Microsoft Authenticator, then set it up again (section 2).

20 of 20

18

6. Still Have Questions?

Contact the EUSS service desk:

Phone: 1800 879 6333

Email: euss_servicedesk@support.gov.sg