Okta: Overview and Setup

Last Updated | Permalink

Overview

Okta is UW-Eau Claire's multi-factor authentication (MFA) solution.  It adds another layer of protection to your account and information by requiring an additional step to log in. In addition to entering your password, Okta notifies you whenever someone attempts to log into your account, prompting you to either allow the login or deny it.

Okta MFA Options

With Okta, you have several choices to pick from for multi-factor authentication. To ensure that you have access when and where you need it, UWEC Learning and Technology Services strongly encourages you to set up multiple MFA options on your account. Here are some of the MFA methods that you can choose from:

First Time Setup

If you are new to UW-Eau Claire and are setting up Okta for the first time, start by navigating to setupokta.uwec.edu and then sign into your UWEC account.

Once logged in, you will be presented with a list of multi-factor authentication (MFA) methods you can set up.  Please proceed to the Configuring Your Devices for Okta section for additional information.

If Adding Another MFA Device

If you already have one or more devices configured for Okta and wish to make changes to your devices, you will need to do so through the UWEC Okta Dashboard.

  1. Sign into myapps.uwec.edu.
  2. Click on your name in the upper-right and select Settings.
    Screenshot showing the link for settings in the Okta Dashboard
  3. Locate the section titled Security Methods.

This is where you can view the options you currently have configured. You can also add and remove multi-factor authentication methods from this page.

Configuring Your Devices for Okta

This section discusses the process for setting up common MFA methods.  Proceed to the below sections after completing the steps in First Time Setup or If Adding Another MFA Device.

Okta Verify on Mobile Devices

Note: It is easiest to set up Okta on a mobile device when you have a computer available. The below steps will indicate if the step should be taken on your mobile device or on your computer.

  1. On a computer, select the option to set up a device for Okta Verify.
  2. Your computer screen will display a page with app download instructions and a QR code. Keep this window open.
  3. On your mobile device, install the Okta Verify app from your device's app store.
  4. Open Okta Verify.
  5. Tap on Get Started or Add Account.
  6. Select Organization when prompted for the account type.

    screenshot from the Okta Verify app showing the option to select Organization

  7. Tap Skip when asked to "Add account from another device."
  8. Tap Yes, Ready to Scan.

    Screenshot of the Okta Verify app showing the options to either scan a QR code or to sign into an account

  9. Scan the QR code that should still be on your computer screen. This will add your UWEC account to the Okta Verify app on your mobile device.

If prompted, allow for notifications from the Okta Verify app. The notifications allow you to approve your login without going into the app.

You can authenticate two different ways with the Okta Verify mobile app: push notifications and offline codes.

Okta FastPass

Okta FastPass uses the Okta Verify app on your Windows or Mac to quickly authenticate without the need to use a separate device. FastPass is device-specific. To use FastPass on multiple devices, you will need to set it up on each device. For this reason, FastPass should serve as a secondary MFA method.

Note: The Okta Verify application is not available for Chromebooks or Linux

  1. Install Okta Verify on your Windows or Mac computer.
  2. Open the Okta Verify app on your computer.
  3. Click on Get Started.
  4. When prompted for the Sign-in URL, enter myapps.uwec.edu.
  5. A web browser will open and prompt you to log into your UWEC account. You will need to use a previously configured multi-factor authentication method to complete the sign-in.
  6. Okta will ask you if you want to configure Windows Hello or Touch ID (macOS).
    • This step is optional.  If you enable it, biometrics will be used as an additional security measure when using FastPass.
    • On UWEC-managed Windows devices, Windows Hello is disabled.

This completes the setup for Okta Verify FastPass. To use FastPass, select Use Okta FastPass from the list of options after signing into your UWEC account. If it defaults to a different method, click on verify with something else. Once you select FastPass, a window will appear that asks you to confirm that it is you asking to login.

Biometrics (Touch ID, Face ID, Windows Hello)

Okta allows you to use the biometric features of your devices for multi-factor authentication. This may include fingerprint readers and cameras often found on laptops and smart phones. You may need to configure the ability to authenticate using biometrics on your device before adding it to Okta. To set up biometrics with Okta, select Security Key or Biometric from the list of setup options.

Note: Biometrics are device-specific. You cannot use biometrics on one device to log into another.

Security Keys (YubiKeys)

Okta supports hardware-based FIDO2 and U2F security keys, such as those from Yubico. Security keys may be used across different computers. Simply plug it into the USB port on another computer. If you already have access to one, you may self-enroll your security key by selecting Security Key or Biometric Authenticator. Follow the onscreen prompts to complete setup.

Hardware Tokens

Hardware tokens are simple key fobs that have a small LED screen and a button. When you press the button, a code that you can use to log into your account displays on the screen for a short time. Hardware tokens do not require any Internet access to function and their small size makes them convenient to carry around. UW-Eau Claire may provide a single hardware token at no cost on a case-by-case basis. The token may be requested through the Request Hardware Token for Okta Authentication eform and a use case must be provided. Once approved, LTS Information Security contacts requestors to coordinate the pickup of the Okta token.

When to Contact the LTS Help Desk for Help

The LTS Help Desk is available to assist if you have any questions about setting up or using Okta Verify with your UW-Eau Claire account. If you find that you are struggling to access your account for any reason, you may need to reach out to us in order to restore your access. The most common scenario is when you have lost access to your authentication device(s), usually a smart phone with Okta Verify configured to your account.

Examples include:

To prevent situations where you could easily lose access to your account, Learning and Technology Services strongly encourages all students, staff and faculty to set up multiple devices with Okta.

LTS Help Desk
Vicki Lord Larson Hall, 1106
715-836-5711
helpdesk@uwec.edu