How to enroll in Mulitfactor Authentication with Okta

Mulitfactor Authentication (MFA) is a method of authentication where the user is asked to provide two independent credentials in order to verify the user’s identity. For example, when a user authenticates with their password, and is also required to provide the six-digit code that is sent to their mobile device.

• MFA is an effective way to enhance security. Traditional usernames and passwords can be stolen, and they've become increasingly more vulnerable to malicious activities.
• MFA creates an additional layer of security to help increase the level of confidence that the user requesting access is actually who they claim to be.
• Reports show that applications and identities are the initial targets in 86% of breaches, so it has become a necessity to protect them using a second layer of security.
• With more applications on external cloud infrastructures, MFA will help ensure our assets are better protected.

How to Enroll in MFA

1. Go to the OneID Dashboard and sign in with your OneID username and password
2. Click your name in the upper right hand corner and select Settings.
3. On the Forgotten Password box, Click Edit
4. Scroll down to Extra Verification and select the option you wish to enroll in

Okta Verify

Okta Verify is a mobile app that verifies your identity in one of two ways. Okta can send you a push notification that you approve using Okta Verify. Alternatively, Okta Verify can generate a six-digit code that you enter into your Okta login screen to access your required app.

Install Okta Verify

1. Download the Okta Verify app from the Apple App Store or Google Play onto your primary mobile device. 
2. Using your computer’s browser, navigate to your OneID Dashboard. 
3. Fill in your OneID credentials and click Sign In.
4. When prompted to enroll in Okta Verify, open the Okta Verify app on your phone and scan the barcode that appears in your computer’s browser.
5. The next time you log into Okta, it should offer to send you a push notification or ask you for a numeric code. If you choose the push notification, then approve it when it arrives on your phone. If you choose to use the code, then access the code in Okta Verify and enter it into your browser.

You can find a PDF Walkthrough in the attachments to this article.

Prefer a video walkthrough? 

View Video Overview: Set up Okta Verify with Push for MFA

View Video Overview: Set up Okta Verify, OTP for MFA

SMS authentication

SMS Authentication uses the text messaging service on your cell phone to send you a one-time login code. You cannot enter this code by approving a push notification as you can in Okta Verify. Instead, you must type it in by hand. 

Set up SMS authentication

1. Using your browser, navigate to your OneID Dashboard. 
2. Fill in your OneID credentials and click Sign In. 
3. You will see a prompt on your device that “Extra verification is required for your account” 
4. Click Setup or Configure Factor.
5. On the Setup: SMS screen, type your phone number.
6. Click Send code. Type the SMS code received by your mobile device into the Receive a Code via SMS to Authenticate screen on your computer and click Verify.

You can find a PDF Walkthrough in the attachments to this article.

Prefer a video walkthrough? 

View Video Overview: Set up SMS for MFA

Voice call

This factor calls you via your smartphone or landline and reads an access code aloud. You then type the code into the browser to access your app. This is great for people who don’t have access to a cell phone because it doesn’t require push notifications or text messages.

Set up voice call authentication

1. Using your browser, navigate to your OneID Dashboard. 
2. Fill in your OneID credentials and click Sign In.
3. You will see a prompt on your device that “Extra verification is required for your account” 
4. Click Setup or Configure Factor.
5. On the Setup: Voice Call Authentication screen, enter your telephone number.
6. Click the Call button.
7. A “Call is in progress…” message appears, followed by a phone call. Enter the provided code into the Enter Code box.
8. Click the Verify button, then Done, if needed.

You can find a PDF Walkthrough in the attachments to this article.

Google Authenticator

This is a third-party app that generates a six-digit code for you to type into your Okta login screen. You have 30 seconds to input the code before it generates another. If you miss the window, use the next code to log in. After five unsuccessful attempts, Okta will lock your account for protection and you must contact an administrator for help.

Set up Google Authenticator

1. Using your browser, navigate to your OneID Dashboard. 
2. Fill in your OneID credentials and click Sign In.
3. You will see a prompt on your device that “Extra verification is required for your account”
4. Click Setup or Configure Factor.
5. On the Set Up Google Authenticator screen, click the device type icon. Click Next. A barcode will appear on your screen.

Install the Google Authenticator app on your device

1. On your mobile device, open the Apple App Store or Google Play and install Google Authenticator.
2. Open the Google Authenticator app.
3. Tap Scan a Barcode. (You might need to install a barcode scanner app; follow the prompts and then re-tap Scan a Barcode.)
4. Hold your device up to the computer screen and scan the barcode.
5. Click Next.
6. Type the Google Authenticator code that appears on your mobile device into the Setup Google Authenticator screen on your computer and click Verify.

You can find a PDF Walkthrough in the attachments to this article.

Prefer a video walkthrough? 

View Video Overview: Set up Google Authenticator for MFA