When to Use?
Multi-factor authentication (MFA) means users must verify their identity in two or more ways to gain access to their account. These can be things such as passwords, answers to security questions, phones (SMS or voice call), and authentication apps, such as Duo and Okta Verify.
MFA is required to protect your account. You must have at least one configured in order to login to Okta. Grand Valley offers three different ways to add MFA; Okta Verify, Duo Security and Google Authenticator.
- Okta Verify - Okta Verify is a mobile app that verifies your identity in one of two ways. Okta can send you a push notification you approve using Okta Verify. Alternatively, Okta Verify can generate a six-digit code you enter into your Okta login screen to access your application.
- Duo Security - Duo offers its own MFA and mobile access products. Okta supports Duo, ensuring your existing processes can continue to operate in conjunction with Okta MFA. Please note that Duo Security is only available for faculty and staff accounts.
- Google Authenticator - Google Authenticator generates a six-digit code for you to enter. This is a time based code that regenerates every 30-60 seconds.End users must install the Google Authenticator app on their mobile device and add an account to it for their Okta org. See Get verification codes with Google
Procedure
How to remove MFA
The steps listed below show how you can remove Duo from your account. The steps apply to any other MFA you want to remove. Keep in mind you must have at least one MFA configured.
- Sign in to Okta, in the upper right-hand corner click on your name and from the drop down menu click on "Settings".
- Click "Remove" next to the MFA you want to delete. In the screenshot below we use Duo Universal MFA as an example.
- Click "Yes" to remove Duo security enrollment. You will be prompted to sign in again.
How to add or modify MFA
The steps listed below show how to add MFA to your account. In the screenshot we use Okta Verify as an example. This process can be used when you want to change your MFA settings or add a new device.
- Sign in to Okta, in the upper right-hand corner click on your name and from the drop down menu click on "Settings".
- Click "Set up" next to the MFA you want to configure. In the screenshot below we use Okta Verify as an example.
- Click "Set up" and follow instructions provided by your MFA option
- Follow the prompts for your specific MFA app. Below is an example of the Okta Verify application. Once the QR code is scanned you have successfully completed adding your MFA.
