Okta MFA Purpose:
Using multi-factor authentication (MFA) with Okta adds an important layer of protection to your Okta account. The objective of MFA is straightforward: to make it much more difficult for anyone other than you to access your accounts. It means that even if someone gets hold of your password, they still can’t sign in without a second form of verification. This extra step helps prevent unauthorized access and keeps our information safe.
When accessing Okta, you will be prompted for MFA up to three times. After that, your device will be remembered for 90 days, and you will only be prompted again once that retention period expires. This applies each time you log into Okta from a new IP address.
You can choose from the following verification options:
(These are listed in order of preference.)
Authenticator Apps
- Google Authenticator app – Our recommended method for strong, reliable security. It generates a one-time passcode (OTP) you enter when signing in.
- Okta Verify app – Provides two ways to confirm your identity: a one-time passcode (OTP) you enter at login, or a push notification that lets you approve the sign-in with a quick tap on your phone.
- SMS text codes – You enter a code that’s texted to your phone. This is the least secure option and also more costly for our organization, so it should only be used if the other methods aren’t possible.
Okta Account MFA Enrollment
- Navigate to the Okta Dashboard (https://kippnj.okta.com) on your computer and sign-in.
-
Click the drop-down menu on your account profile (top right) and select “Settings”.
-
Click "Edit Profile" and re-authenticate if prompted to edit your Okta account.
- Locate the “Extra Verification” section.
-
Click “Set up” next to an authentication method: “Google Authenticator”, "Okta Verify", or "SMS Authentication".
Note: Google Authenticator is the preferred authentication method.
- Follow the on-screen prompts to complete your Multi-factor Authenticator set up method.
Comments
0 comments
Please sign in to leave a comment.