Topics Map > Client Services

Okta - FAQ (Frequently Asked Questions)

Commonly asked questions about Okta

What is Okta?

Okta can do many things. The one we use it for is multi-factor authentication.

Why should I have more than one Security Method (Okta Device)? 

To help avoid account access issues after business hours (see Eagle Help Desk) since One-time emailed or texted passcodes are not supported in Okta.

Need help? contact the Eagle Help Desk

I am getting a new phone, what should I do?

When getting a new phone, the Okta app will transfer over and the UW account will be removed in the process. Before you erase, sell, or trade-in your old phone you will need to remove the Okta connection on it. 

To avoid issues, ITS strongly recommends more than one security device so you can authenticate into the myapps.uwlax.edu portal and remove old/unneeded devices.  With only one device, you get stuck in a loop of never finding the (only) device to send the initial push.

In Phone

Open up the Okta Verify app, and tap the right arrow:

okta Verify Settings


Scroll down and tap Delete Account:

okta Verify Delete Account

This will remove the device from the Okta system.

In Web Browser

In a browser, navigate to https://myapps.uwlax.edu

Enter your Username (NetId or Email), Password, and Sign In, and Verify with the Okta MFA:

Okta sign in screen


On the MyApps portal page, in the upper right, click your Name -> Settings

Click Name


In the Security Methods section, click Remove next to the current/old phone (iPhone XIII shown below):  If there are any biometrics authenticators there, like a Windows Hello.. or MacBook TouchID, you will need to remove those as well - they can be set up later, but need to be removed for now:

Set Up

Remove the device(s), click your name in the upper right -> Sign Out, and close out of the MyApps portal window.

 

After Getting New Phone:

Sign into a UW service, like Wings, on a computer - not your phone.

(if you are currently signed into something already on your computer, Sign Out, or open a new Incognito Window/Private Browsing Window, and sign into Wings from the UW homepage: https://www.uwlax.edu)

Enter your netID and password, and the next screen will prompt you to Set Up Okta Verify again:

Okta set up security methods picture

Click Set Up, and when the QR code comes up, go onto the new phone and open Okta Verify.  Tap Get Started (or New Account) -> Organization -> Skip From Another Device.  Then tap Yes, Ready to Scan, allow the camera's use if asked, and scan the QR code on the computer screen with the Okta Verify app.  

This should re-enroll the device with that account!

We can also remove the old device over the phone - please call the help desk at 608-785-8774 Monday - Friday, 7:30 am - 4:30 pm

I got a new phone and now Okta is not working. What do I do?

I still have access to my old phone or Okta on another device: 

Add your new phone to your Okta account by following the instructions below or going to OKTA - SET UP ADDITIONAL DEVICES OR REMOVE DEVICES (SECURITY METHODS MANAGEMENT)

Setting up Okta Verify for Windows or Mac?

See Okta - Okta Verify App Setup (FastPass for Windows & macOS)

For all other Security Methods, see below:

In a browser on a computer, go to https://myapps.uwlax.edu.

Enter your NetId or Email, Password then choose Next.

Sign In

Click your Name, Settings

Click Name

By the Security Method you would like, Set up or Set up another. If you are looking to remove a device, Remove.

Set Up

Enter Password, Verify

Password

Approve the two factor request and follow the appropriate steps below:

Okta Verify Setup Instructions

Set up

Okta Verify Setup

Install the Okta Verify App 

Okta Verify App Setup (iOS)

Okta Verify App Setup (Android)

Okta Verify QR

Security Key (YubiKey) or Biometric Authenticator (macOS or iOS)

Set up

Set up

Set up

Set up

Use Touch ID or Other Options if using a YubiKey

Other Options

If setting up a YubiKey, choose Security Key, Continue

YubiKey

Device and Yubikey have NFC? Place Yubikey near device (top of device typically)

Otherwise: Insert YubiKey, gently press the gold surface

Insert Yubikey

Done, the device has been added to your account!

Please Note: macOS and iOS do not require you setup a PIN for a Yubikey. Windows will require you to setup a PIN the first time you connect a YubiKey and authenticate with it. Once a PIN is set you will be prompted every time you authenticate using the YubiKey on any device.  Need to change your PIN? see Okta - Yubikey PIN (Change or Reset)

Security Key (YubiKey) or Biometric Authenticator (Windows)

Set up

Set up

Set up

Set up

OK

Windows Security

OK

Continue Setup

Windows Hello or external security key

External Security Key

Insert the YubiKey

Continue Setup

Enter the desired PIN, Verify the PINOK. The PIN entered here will be required anytime you authenticate with the YubiKey.

PIN

Gently press the gold surface

Touch

Done, the device has been added to your account!

Need to change your PIN? see Okta - Yubikey PIN (Change or Reset)

I do not have access to my old phone or Okta on another device: 

Please call or stop by the Eagle Help Desk in Wing 0103. 

How do I set up my account for Okta?

Important:

ITS recommends to have at least two security devices added to your account; (i.e. cell phone, laptop, iPad . . .) you may add as many devices as you like.

  • It is recommended to setup Okta on your cell phone first before adding other devices because you need to "verify" when adding other devices.  The easiest way is to use your cell phone for verification.

NOTE: One-time pass codes are not supported in Okta.

1. Go to the Apple Store or Google Play depending on your cell phone type and download the Okta Verify app and then install the app.

2. Open the app and select "add an account".  "Not add an account from another device."

3. Then select "organization".

4. Select "Skip".

5. Then, select "No, sign in instead".

6. In the URL box type myapps.uwlax.edu, and continue.

7. Then sign in with your NetID and Password.

8. Follow the prompts - allow notifications.  It will also prompt you if you want to add a "biometric" option as well.  Biometrics is optional.

9.  When completed you will see "account added".

10.  Okta should be ready to go.  You will have a choice to "input a code" or "receive a push".

Where do I get the Okta Verify App?

What is Okta Verify (FastPass)?

Okta Verify (FastPass) is a setting within the Okta Verify App. Once setup, the Okta Verify app will automatically prompt you when signing into an Okta protected app and choosing "Use Okta FastPass." This means you will not need to use another Security Method (Push Notification or a YubiKey) to approve the request.

Okta FastPass 

How do I disable biometrics on Android?

See the Disable Biometrics section of Okta - Okta Verify App Setup (Android)

What can be used as a security method (verification device)?

Okta Verify App (iOS, Android, Windows, macOS)

YubiKeys (USB-C w/NFC, USB-A w/NFC, and Lightning) - Works with Windows, macOS, iOS, Chrome OS, Linux, leading web browsers, and hundreds of services.

TouchID (macOS)

How do I set up additional devices (Security Methods Management)?

Setting up Okta Verify for Windows or Mac?

See Okta - Okta Verify App Setup (FastPass for Windows & macOS)

For all other Security Methods, see below:

In a browser on a computer, go to https://myapps.uwlax.edu.

Enter your NetId or Email, Password then choose Next.

Sign In

Click your Name, Settings

Click Name

By the Security Method you would like, Set up or Set up another. If you are looking to remove a device, Remove.

Set Up

Enter Password, Verify

Password

Approve the two factor request and follow the appropriate steps below:

Okta Verify Setup Instructions

Set up

Okta Verify Setup

Install the Okta Verify App 

Okta Verify App Setup (iOS)

Okta Verify App Setup (Android)

Okta Verify QR

Security Key (YubiKey) or Biometric Authenticator (macOS or iOS)

Set up

Set up

Set up

Set up

Use Touch ID or Other Options if using a YubiKey

Other Options

If setting up a YubiKey, choose Security Key, Continue

YubiKey

Device and Yubikey have NFC? Place Yubikey near device (top of device typically)

Otherwise: Insert YubiKey, gently press the gold surface

Insert Yubikey

Done, the device has been added to your account!

Please Note: macOS and iOS do not require you setup a PIN for a Yubikey. Windows will require you to setup a PIN the first time you connect a YubiKey and authenticate with it. Once a PIN is set you will be prompted every time you authenticate using the YubiKey on any device.  Need to change your PIN? see Okta - Yubikey PIN (Change or Reset)

Security Key (YubiKey) or Biometric Authenticator (Windows)

Set up

Set up

Set up

Set up

OK

Windows Security

OK

Continue Setup

Windows Hello or external security key

External Security Key

Insert the YubiKey

Continue Setup

Enter the desired PIN, Verify the PINOK. The PIN entered here will be required anytime you authenticate with the YubiKey.

PIN

Gently press the gold surface

Touch

Done, the device has been added to your account!

Need to change your PIN? see Okta - Yubikey PIN (Change or Reset)

How many security methods (verification devices) can I have?

ITS recommends to have at least two security methods (verification devices) added to your account; you may add as many as you like. Adding your phone number to Okta is NOT a security method as texting (SMS) is not an available option.

One-time emailed or texted pass codes are not supported in Okta.

I don't have access to any of my security methods, can I get a one-time pass code?

One-time emailed or texted pass codes are not supported in Okta; please contact the Eagle Help Desk.

ITS recommends to have at least two security methods (devices) added to your account to avoid account access issues after business hours.

How do I get a YubiKey (physical security key)?

UWL Faculty and Staff

Students

How do I set up a YubiKey?

NOTE: If you plan to use a YubiKey you must set up Okta Verify on a device first. No SmartPhone? See Okta Verify App Set Up (Windows or macOS)

Okta - Set Up Additional Devices (Security Methods Management)

What if I need a YubiKey with USB-A, USB-C and Lightning?

ITS recommends using the Okta Verify app when possible.

USB-C is the most widely used connection type; USB-A and Lightning connections are slowly being phased out by manufacturers. If you need multiple connection types you may need multiple YubiKeys, keep in mind the USB-C and USB-A YubiKeys recommended by ITS have NFC (Near Field Communication) built into them. This means you may use them to authenticate with devices that support this feature (most smartphones).

See "How do I get a YubiKey (physical security key)?" on this page.

YubiKeys are the only security method right for me, how can I set them up?

The Okta Verify app will need to be setup for your account before YubiKeys can be added. Once the YubiKeys have been added then the Okta Verify App can be removed from your account.

If you do not have access to a device where Okta Verify can be setup with your account please visit the Eagle Help Desk for assistance.

How do I change or reset the PIN on my YubiKey?

Install YubiKey Manager from https://www.yubico.com/support/download/yubikey-manager/

Insert the YubiKey then open YubiKey Manager, click Applications > FIDO2

Applications

On Windows and getting "Failed connecting to the YubiKey" message?

Failed Connecting

Then close the app, right click YubiKey Manager and choose Run as Administrator

Run As Admin

Change PIN

Change PIN

Change PIN

Update the PIN then click Change PIN

Change PIN

Reset PIN

Reset FIDO

Reset PIN

Read the prompt, Yes

Reset PIN

Make sure to follow the steps in Okta - Set Up Multiple Devices (Security Methods Management) to remove the old Security Method of the YubiKey before you add it again.

Remove

 

I don't have a smartphone, what are my options?

Consider purchasing a Yubikey, once you have it follow Okta - Okta Verify App Setup (Windows & macOS) then Okta - Set Up Additional Devices (Security Methods Management) 

See also the question in this FAQ "YubiKeys are the only security method right for me, how can I set them up?



KeywordsOkta, Mutlifactor, multi-factor, multi factor   Doc ID131580
OwnerTravis S.GroupUW-La Crosse
Created2023-09-21 08:31:50Updated2024-07-11 16:13:03
SitesUW-La Crosse
Feedback  2   40