How does two step login work with Okta? How do I login?

Question

How does two step login work with Okta?

Answer

Two step authentication reduces the ability of a hacker to access your account and data, by requiring two methods to verify you:

1. The NetID and password that you know
2. A phone, tablet device or Yubikey that you have possession of

A hacker may gain access to your NetID and password, but it will be more difficult for them to access that device as well.

So how will I login?

1. When you login to an ND service protected by two step (e.g. Gmail, Sakai, Box, and many others), you will enter your NetID and click Next
   
   
   1. If you are using a computer or device that is NOT shared with others, you can check the box, Keep me signed in
      
      1. This will store information on that device or browser so that you won't be prompted for Two Step again until 30 days have elapsed.
      2. Note: Do NOT check this box on a shared computer such as a classroom or lab, as it may allow others using that computer to access your account.
2. You'll then be prompted for your password. Click Next after entering it.
3. If the system needs to verify your login, you will then be presented with a second screen allowing you to select which device and method you wish to use as your "second factor". That screen will look something like:
   
4. You will then see additional prompts depending on which option you selected.
5. Once you've completed the authentication process you'll be logged onto the application you were trying to access.

In general, students, faculty and staff should expect to log in with your NetID and password an average of once per day (per device) if you are using services like InsideND and Canvas.  Some applications have a shorter inactivity timeout that may require more frequent logins (e.g. Banner). As long as you click on the Keep me signed in, you should expect to 2-factor every 30 days unless they are using a new device or have relocated.