Definitions
Okta: Okta is a directory and single sign on (SSO) platform designed to make it both easy and secure to access all the online apps available to you through Southern Oregon University.
MFA: MFA stands for “multi-factor authentication.” MFA describes the concept of using more than one “factor” to prove your identity to a system. Factors can be something you know (e.g. password), something you have (e.g. possession of a phone configured with Okta Verify), or something you are (e.g. biometrics). You achieve MFA whenever you use a combination of two or more of these factor types together to provide strong assurance of your identity when you access SOU’s systems through Okta.
MFA Setup in Okta
To keep your SOU account secure, you should configure one or more MFA factors in Okta for securing your account. (You may be required by SOU’s security policies to do this.) This article will provide you with more information about each factor available to you and how to use them with your Okta account.
Enrolling a MFA Factor
When you sign in to Okta (https://okta.sou.edu), you will first be prompted for your password. That is your first factor: something that only you should know. After you provide the correct password for your account, Okta will then ask you to present at least one other factor type before letting you in--unless your account is configured to skip this step.
If you are missing a suitable factor on your account for this second step, Okta will prompt you to enroll a factor that satisfies the requirement. (More on enrolling for these factors later.)
If you already have a suitable factor on your account for the second step, Okta will have you prove your possession of that factor, then it will let you into your account.
Okta maintains a guide for first-time setup here. We do not support all the factors they mention, but the guide covers everything that we do support.
Enrolling or Removing a MFA Factor from Your Dashboard
Even when you have enough factors to satisfy Okta’s security requirements for your account, you always have the option of enrolling additional factors from your Okta Dashboard. Here are the steps:
Log in to Okta at https://okta.sou.edu
Navigate to your account settings by clicking on your name in the top-right corner of the screen, then select Settings from the menu. (See the screenshot below.)
On the Settings page, scroll down and look for the Security Methods section. That section of the Settings screen will show you all your enrolled MFA factors and will also present you with buttons you can use to either enroll additional factors or remove factors from your Okta account.
Please avoid removing MFA factors from your account unless you no longer have possession of the factor. For example, if you bought a new phone and no longer have the old one, then go ahead and remove the old phone from your account and enroll the new phone.
It is normal to be prompted for your password again when enrolling a new factor through your account settings. That is a security feature!
Follow the on-screen instructions to finish registering whichever factor you selected to enroll.
Available MFA Factors in Okta
See below for a description of each factor and how to set it up.
Something You Know
Password
Something You Have
Okta Verify (phone app)
Phone
One-time code hardware token
Something You Are
Okta Verify (phone app): Okta Verify optionally supports the use of available biometric factors on smartphones that support fingerprint reading or facial recognition.
Password
See our companion article at How to Change Your SOU Account Password in Okta for detailed instructions on how to change your password.
You can reset your password from your Okta dashboard settings (the same place you manage your MFA factors). The Change Password section is just above the Security Methods section. Provide your current password, then create a new password that conforms to the password policies displayed in the Change Password section. If you need help, contact our IT Helpdesk at 541-552-6900.
Okta Verify
Okta Verify is a versatile, free app that runs on your iOS or Android phone or tablet. Okta Verify is our recommended MFA factor for all users because of how powerful and convenient it is. Okta Verify supports push notifications sent to your device (tap to approve), time-based one-time codes, and biometric verification if your device supports doing that.
iOS Instructions | Android Instructions |
The push notification and biometric authentication methods in Okta Verify require an active data connection to function (Wi-Fi, 3G, 4G, 5G, etc).
One-Time Passcodes - No data connection required!
The Okta Verify smartphone app automatically produces one-time codes every 30 seconds that you can use to log in without a data connection on your phone. This is a great solution for when your phone lacks reception and you can’t receive a push notification.
Just open the Okta Verify app on your phone and look for the code.
Below is a screenshot showing you what the Okta Verify codes look like. The horizontal bar along the top of the app shows you how much time you have before the codes refresh. If the bar is nearly full, you should wait until the codes refresh to give yourself enough time to enter the code into Okta.
To use the code, select the “Enter a code” option in Okta. It will then give you a text field where you can enter the code. If the code expires before you finish entering it, just use the next available code that appears in your Okta Verify app.
Phone
You can register any active phone number in your possession in Okta to receive one-time codes by text message (suitable for mobile phones) or by voice call (suitable for land lines and mobile phones). Charges may apply through your carrier.
Still Need Help?
If you have questions after reading this article, please contact our IT Helpdesk at 541-552-6900 or at helpdesk@sou.edu.
Add a comment
Please log in or register to submit a comment.