Topics Map > Client Services
Okta - FAQ (Frequently Asked Questions)
What is Okta?
Okta can do many things. The one we use it for is multi-factor authentication.
Why should I have more than one Security Method (Okta Device)?
To help avoid account access issues after business hours (see Eagle Help Desk) since One-time emailed or texted passcodes are not supported in Okta.
Need help? contact the Eagle Help Desk.
I am getting a new phone, what should I do?
Important:
When getting a new phone, the Okta app will transfer over and the UW account will be removed in the process. Before you erase, sell, trade-in or discontinue use of your old phone you will need to remove the Okta connection on it.
To avoid issues, ITS strongly recommends more than one security device so you can authenticate into the myapps.uwlax.edu portal and remove old/unneeded devices. With only one device, you get stuck in a loop of never finding the (only) device to send the initial push.
On Phone (Okta Verify App)
Open up the Okta Verify app, and tap the right arrow
Scroll down and tap Delete Account. This will remove the device from the Okta system.
Via Web Browser
In a browser, go to https://myapps.uwlax.edu.
Enter your NetId or Email, Password, and Sign In, then Verify with the Okta MFA.
On the MyApps portal page, in the upper right, click your Name > Settings
Click Remove next to the current/old phone. If there are any Biometric Authenticators (ex. Windows Hello.. or MacBook TouchID), remove them also (they can be setup again later).
Sign Out of MyApps.
To add your new phone, see Okta - Initial Setup[Link for document 131529 is unavailable at this time]
Need more help? Contact the Eagle Help Desk.
I got a new phone and now Okta is not working. What do I do?
I have access to my old phone
Important:
When getting a new phone, the Okta app will transfer over and the UW account will be removed in the process. Before you erase, sell, trade-in or discontinue use of your old phone you will need to remove the Okta connection on it.
To avoid issues, ITS strongly recommends more than one security device so you can authenticate into the myapps.uwlax.edu portal and remove old/unneeded devices. With only one device, you get stuck in a loop of never finding the (only) device to send the initial push.
On Phone (Okta Verify App)
Open up the Okta Verify app, and tap the right arrow
Scroll down and tap Delete Account. This will remove the device from the Okta system.
Via Web Browser
In a browser, go to https://myapps.uwlax.edu.
Enter your NetId or Email, Password, and Sign In, then Verify with the Okta MFA.
On the MyApps portal page, in the upper right, click your Name > Settings
Click Remove next to the current/old phone. If there are any Biometric Authenticators (ex. Windows Hello.. or MacBook TouchID), remove them also (they can be setup again later).
Sign Out of MyApps.
To add your new phone, see Okta - Initial Setup[Link for document 131529 is unavailable at this time]
Need more help? Contact the Eagle Help Desk.
I have Okta setup on another device
Setting up Okta Verify for Windows or Mac?
See Okta - Okta Verify App Setup (FastPass for Windows & macOS)
For all other Security Methods, see below:
In a browser on a computer, go to https://myapps.uwlax.edu.
Enter your NetId or Email, Password then choose Next.
Click your Name, Settings
By the Security Method you would like, Set up or Set up another. If you are looking to remove a device, Remove.
Enter Password, Verify
Approve the two factor request and follow the appropriate steps below:
Okta Verify Setup Instructions
Important:
ITS recommends to have at least two security devices added to your account; (i.e. cell phone, laptop, iPad . . .) you may add as many devices as you like.
It is recommended to setup Okta on your cell phone first before adding other devices because you need to "verify" when adding other devices. The easiest way is to use your cell phone for verification.
In the future, when you get a new phone make sure to see Okta - Authenticator Removal Before Getting a New Phone
Replaced your phone and still have the old one? See Okta - Authenticator Removal Before Getting a New Phone.
If you no longer have your old phone then contact Eagle Help Desk
Install and Setup
University Owned (iOS)
Open Self Service
Sign in
Install
Open Okta Verify
Personally Owned
Download Okta Verify for iOS or Okta Verify for Android
Looking for Okta Verify App Setup (Windows and mac)
Get Started
Next
Received an SMS from Okta? Open the texted link again to complete setup.
Add account
Organization
Skip
No, Sign In Instead
Enter myapps.uwlax.edu, Next.
Sign in with your UWL credentials. If prompted regarding "Push Notifications" choose Allow.
Allow
Done
Disable Biometrics (Android)
On the Account details page, go to the Options section and turn off Use biometrics.
When prompted, verify your identity with biometrics.
Once installed and Okta verification is needed, you may choose:
Send Push: Sends a verification request (requires internet access)
Send Push
Yes, It's Me
Verify with something else: Enter the code from the app (internet access not needed)
Verify with something else
Enter a Code, Select
Enter code from Okta Verify app, Verify
Security Key (YubiKey) or Biometric Authenticator (macOS or iOS)
Set up
Set up
Use Touch ID or Other Options if using a YubiKey
If setting up a YubiKey, choose Security Key, Continue
Device and Yubikey have NFC? Place Yubikey near device (top of device typically)
Otherwise: Insert YubiKey, gently press the gold surface
Done, the device has been added to your account!
Please Note: macOS and iOS do not require you setup a PIN for a Yubikey. Windows will require you to setup a PIN the first time you connect a YubiKey and authenticate with it. Once a PIN is set you will be prompted every time you authenticate using the YubiKey on any device. Need to change your PIN? see Okta - Yubikey PIN (Change or Reset)
Security Key (YubiKey) or Biometric Authenticator (Windows)
Set up
Set up
OK
OK
Windows Hello or external security key
Insert the YubiKey
Enter the desired PIN, Verify the PIN, OK. The PIN entered here will be required anytime you authenticate with the YubiKey.
Gently press the gold surface
Done, the device has been added to your account!
Need to change your PIN? see Okta - Yubikey PIN (Change or Reset)
I do not have access to my old phone or Okta on another device
Please call or stop by the Eagle Help Desk in Wing 0103.
How do I set up my account for Okta?
Important:
ITS recommends to have at least two security devices added to your account; (i.e. cell phone, laptop, iPad . . .) you may add as many devices as you like.
It is recommended to setup Okta on your cell phone first before adding other devices because you need to "verify" when adding other devices. The easiest way is to use your cell phone for verification.
In the future, when you get a new phone make sure to see Okta - Authenticator Removal Before Getting a New Phone
Replaced your phone and still have the old one? See Okta - Authenticator Removal Before Getting a New Phone.
If you no longer have your old phone then contact Eagle Help Desk
Install and Setup
University Owned (iOS)
Open Self Service
Sign in
Install
Open Okta Verify
Personally Owned
Download Okta Verify for iOS or Okta Verify for Android
Looking for Okta Verify App Setup (Windows and mac)
Get Started
Next
Received an SMS from Okta? Open the texted link again to complete setup.
Add account
Organization
Skip
No, Sign In Instead
Enter myapps.uwlax.edu, Next.
Sign in with your UWL credentials. If prompted regarding "Push Notifications" choose Allow.
Allow
Done
Disable Biometrics (Android)
On the Account details page, go to the Options section and turn off Use biometrics.
When prompted, verify your identity with biometrics.
Once installed and Okta verification is needed, you may choose:
Send Push: Sends a verification request (requires internet access)
Send Push
Yes, It's Me
Verify with something else: Enter the code from the app (internet access not needed)
Verify with something else
Enter a Code, Select
Enter code from Okta Verify app, Verify
Where do I get the Okta Verify App?
What is Okta Verify (FastPass)?
Okta Verify (FastPass) is a setting within the Okta Verify App. Once setup, the Okta Verify app will automatically prompt you when signing into an Okta protected app and choosing "Use Okta FastPass." This means you will not need to use another Security Method (Push Notification or a YubiKey) to approve the request.
How do I disable biometrics on Android?
See the Disable Biometrics section of Okta - Okta Verify App Setup (Android)
What can be used as a security method (verification device)?
Okta Verify App (iOS, Android, Windows, macOS)
YubiKeys (USB-C w/NFC, USB-A w/NFC, and Lightning) - Works with Windows, macOS, iOS, Chrome OS, Linux, leading web browsers, and hundreds of services.
TouchID (macOS)
How do I set up additional devices (Security Methods Management)?
Setting up Okta Verify for Windows or Mac?
See Okta - Okta Verify App Setup (FastPass for Windows & macOS)
For all other Security Methods, see below:
In a browser on a computer, go to https://myapps.uwlax.edu.
Enter your NetId or Email, Password then choose Next.
Click your Name, Settings
By the Security Method you would like, Set up or Set up another. If you are looking to remove a device, Remove.
Enter Password, Verify
Approve the two factor request and follow the appropriate steps below:
Okta Verify Setup Instructions
Important:
ITS recommends to have at least two security devices added to your account; (i.e. cell phone, laptop, iPad . . .) you may add as many devices as you like.
It is recommended to setup Okta on your cell phone first before adding other devices because you need to "verify" when adding other devices. The easiest way is to use your cell phone for verification.
In the future, when you get a new phone make sure to see Okta - Authenticator Removal Before Getting a New Phone
Replaced your phone and still have the old one? See Okta - Authenticator Removal Before Getting a New Phone.
If you no longer have your old phone then contact Eagle Help Desk
Install and Setup
University Owned (iOS)
Open Self Service
Sign in
Install
Open Okta Verify
Personally Owned
Download Okta Verify for iOS or Okta Verify for Android
Looking for Okta Verify App Setup (Windows and mac)
Get Started
Next
Received an SMS from Okta? Open the texted link again to complete setup.
Add account
Organization
Skip
No, Sign In Instead
Enter myapps.uwlax.edu, Next.
Sign in with your UWL credentials. If prompted regarding "Push Notifications" choose Allow.
Allow
Done
Disable Biometrics (Android)
On the Account details page, go to the Options section and turn off Use biometrics.
When prompted, verify your identity with biometrics.
Once installed and Okta verification is needed, you may choose:
Send Push: Sends a verification request (requires internet access)
Send Push
Yes, It's Me
Verify with something else: Enter the code from the app (internet access not needed)
Verify with something else
Enter a Code, Select
Enter code from Okta Verify app, Verify
Security Key (YubiKey) or Biometric Authenticator (macOS or iOS)
Set up
Set up
Use Touch ID or Other Options if using a YubiKey
If setting up a YubiKey, choose Security Key, Continue
Device and Yubikey have NFC? Place Yubikey near device (top of device typically)
Otherwise: Insert YubiKey, gently press the gold surface
Done, the device has been added to your account!
Please Note: macOS and iOS do not require you setup a PIN for a Yubikey. Windows will require you to setup a PIN the first time you connect a YubiKey and authenticate with it. Once a PIN is set you will be prompted every time you authenticate using the YubiKey on any device. Need to change your PIN? see Okta - Yubikey PIN (Change or Reset)
Security Key (YubiKey) or Biometric Authenticator (Windows)
Set up
Set up
OK
OK
Windows Hello or external security key
Insert the YubiKey
Enter the desired PIN, Verify the PIN, OK. The PIN entered here will be required anytime you authenticate with the YubiKey.
Gently press the gold surface
Done, the device has been added to your account!
Need to change your PIN? see Okta - Yubikey PIN (Change or Reset)
How many security methods (verification devices) can I have?
ITS recommends to have at least two security methods (verification devices) added to your account; you may add as many as you like. Adding your phone number to Okta is NOT a security method as texting (SMS) is not an available option.
One-time emailed or texted pass codes are not supported in Okta.
I don't have access to any of my security methods, can I get a one-time pass code?
One-time emailed or texted pass codes are not supported in Okta; please contact the Eagle Help Desk.
ITS recommends to have at least two security methods (devices) added to your account to avoid account access issues after business hours.
How do I get a YubiKey (physical security key)?
UWL Faculty and Staff
Students
- Recommended: USB-C w/NFC (hold near top of most smart phones to authenticate) - Yubico Yubikey C NFC Blister Security Key
- USB-A w/NFC (hold near top of most smart phones to authenticate) - Yubico Yubikey NFC USB-A Standard Blister Security Key
- Lightning and USB-C - Yubico Yubikey 5Ci Standard Blister Security Key
How do I set up a YubiKey?
NOTE: If you plan to use a YubiKey you must set up Okta Verify on a device first. No SmartPhone? See Okta Verify App Set Up (Windows or macOS)
Okta - Set Up Additional Devices (Security Methods Management)
What if I need a YubiKey with USB-A, USB-C and Lightning?
ITS recommends using the Okta Verify app when possible.
USB-C is the most widely used connection type; USB-A and Lightning connections are slowly being phased out by manufacturers. If you need multiple connection types you may need multiple YubiKeys, keep in mind the USB-C and USB-A YubiKeys recommended by ITS have NFC (Near Field Communication) built into them. This means you may use them to authenticate with devices that support this feature (most smartphones).
See "How do I get a YubiKey (physical security key)?" on this page.
YubiKeys are the only security method right for me, how can I set them up?
The Okta Verify app will need to be setup for your account before YubiKeys can be added. Once the YubiKeys have been added then the Okta Verify App can be removed from your account.
If you do not have access to a device where Okta Verify can be setup with your account please visit the Eagle Help Desk for assistance.
How do I change or reset the PIN on my YubiKey?
Install YubiKey Manager from https://www.yubico.com/support/download/yubikey-manager/
Insert the YubiKey then open YubiKey Manager, click Applications > FIDO2
On Windows and getting "Failed connecting to the YubiKey" message?
Then close the app, right click YubiKey Manager and choose Run as Administrator
Change PIN
Change PIN
Update the PIN then click Change PIN
Reset PIN
Reset FIDO
Read the prompt, Yes
Make sure to follow the steps in Okta - Set Up Multiple Devices (Security Methods Management) to remove the old Security Method of the YubiKey before you add it again.
I don't have a smartphone, what are my options?
Consider purchasing a Yubikey, once you have it follow Okta - Okta Verify App Setup (Windows & macOS) then Okta - Set Up Additional Devices (Security Methods Management)
See also the question in this FAQ "YubiKeys are the only security method right for me, how can I set them up?