Okta | Yubikey or Hardware Token

When to Use?

Using a YubiKey as an MFA authenticator in Okta is an excellent way to enhance security, particularly when handling sensitive information, complying with regulations, or operating in high-risk environments. It provides strong protection against phishing attacks and is especially beneficial for users who prefer hardware-based security. Additionally, YubiKey supports multiple devices and platforms, making it a versatile choice for securing access across various systems.

Procedure

Registering Your YubiKey as an MFA Authenticator in Okta

1. Preparation

   • Ensure you have your YubiKey device.
   • Make sure you have access to your Okta account.

2. Log in to Your Okta Account

   • Open your web browser and navigate to https://my.gvsu.edu.
   • Enter your username and password to log in.
   • If you are a new user who has not previously logged into Okta, has not registered any other MFA authenticator, or has had your MFA authenticator reset by IT, you can proceed to step 5 after entering your username and password.

3. Navigate to Security Settings

   • After logging in, click on your name or profile icon in the upper-right corner of the Okta dashboard.
   • Select My Settings from the drop-down menu.
   •  
      

4. Add a New Authenticator

   • Click Manage security methods or Security Methods on the side.
     
      
   • Click on Set up next to the Security Key or Biometric Authenticator option.
      

5. Register Your YubiKey

   • A new window will appear, prompting you to register your security key.
   • Click on Set up next to the Security Key or Biometric Authenticator
   • 
      
   • Insert your YubiKey into a USB port on your computer (or connect via NFC if using a supported device).
   • At this point, if your device supports other authentication methods, such as Apple’s Touch ID or Windows Hello, you may be prompted to choose from multiple options. In this case, select "Security Key" from the list. If you don’t see this option immediately, you may need to navigate to "Use another device" within the initial menu prompt.
   • 
   • 
      
   • Follow the on-screen instructions and touch your YubiKey when prompted. (On Mac devices, you may not receive a prompt—watch for the blinking light on your YubiKey and touch it when it starts blinking.)
     

6. Complete Registration

   • Follow any additional on-screen instructions to complete the setup process.
     

7. Test Your YubiKey

   • Once registration is complete, log out of your Okta account.
   • Attempt to log back in. After entering your username and password, you should be prompted to use your YubiKey.
   • Insert your YubiKey and touch the button when it lights up to authenticate.

8. Confirm Setup

   • If the login is successful, your YubiKey has been successfully registered as an MFA authenticator for your Okta account.
   • If you encounter any issues, repeat the steps or contact your IT services team for assistance.

Additional Tips

• Secure Storage: Keep your YubiKey in a secure place when not in use to prevent loss or theft.
• YubiKey Removal: The YubiKey can be safely removed once you are logged in. However, it will need to be reinserted if re-authentication is required.