Question: Can I use the Authy mobile app for two step login with Okta? How do I enroll it?

Answer:  Authy is currently approved for use ONLY by undergraduate students.  Information Security is currently working with the vendor to evaluate it is safe for use by faculty, staff and graduate students who interact with University data. 

Authy functions as a replacement for Google Authenticator.  One of the benefits of Authy is that you can use it on multiple devices, such as both an iPhone and an iPad, and even work on a computer, which may be useful for those travelling abroad. 

Follow the steps below to enroll Authy for your mobile device. (You'll need to download it from your app store or the Authy website if you haven't already done so). If you do not have a mobile device but wish to use Authy on your laptop or desktop follow the instructions in KB0018321

Setup Authy for the first time: 

(Skip to Enroll Authy in Okta if you've previously configured Authy for other services)

1. Download and install Authy from your device's app store (for mobile) or at authy.com (for computer)
2. Select your country from the +code option, then enter your cell number
   
3. Enter your email address
   
4. You can either select the SMS or the Phone Call option
   
   
   • SMS
     1. Your cell phone will receive a text message with a passcode
     2. Enter the passcode if prompted in the Authy app, or the Authy app will automatically read the passcode and continue to the next step
   • Phone Call
     1. Answer the call
     2. Respond to the prompt
     3. Write down the code
     4. Enter the code in the Authy app

Enroll Authy in Okta

1. On your computer, go to okta.nd.edu and login with your username and password and a previously enrolled option.
2. Click on your name in the upper right hand corner
3. Click on Settings
4. Click on Edit Profile
5. Enter your ND password and authenticate using a previously enrolled option
6. Locate the Extra Verification section of your settings.
   1. If you've previously enrolled Google Authenticator, you will need to choose Reset which will remove that configuration so you can replace it with Authy.
7. Click Setup for the Google Authenticator Mobile App.
8. Select the type of phone you have and click Next.  A screen with a barcode (QR code) will appear.
9. On your cell phone launch the Authy app and tap the Add Account option.
   1. If this is your first time using the Authy app you will also be prompted to set a password for backups; this is a recommended option. The OIT cannot assist in restoring access to your Authy account if a Master Password is lost or forgotten. 
      
10. Tap Scan QR Code and position the phones camera to scan the barcode on your computer screen.
    
11. Authy will then prompt you with a logo and the option to Select another logo.
    
    
    1. You can leave the default logo or select one of the available options.  Note: There is an option available for Okta.
12. After selecting the logo, tap Done.
13. On the computer, you will need to click Next after scanning the barcode and configuring Authy.
14. Your computer will now prompt for a code.  The Authy app will be displaying a 6 digit code -- enter that on the computer screen and click Verify.
15. Click Done.

To configure Authy on a second device

1. Install and launch the Authy app on the second device
2. Enter the cell phone number for your primary device
   Note: The cell number you initially use will be the primary number for your Authy account, even if you use multiple cell phones with different numbers
3. Choose a verification type
   
   
   • Use Existing Device (Recommended)
     1. On the device that you've previously configured Authy, launch the Authy app and you will see a prompt indicating a new device wants to be added as another device.  Tap Accept
        
     2. You'll see a Warning message asking you to confirm this action.  Type the requested response in the field provided and click OK.
        
   • SMS
     1. A text message will be sent to your primary device
     2. Enter the code in your new device
   • Phone Call
     1. Your primary device will receive a phone call
     2. Answer the call, then enter the code provided in your new device
4. If you entered a password for backups, tap your account icon and enter your backups password, then click Decrypt Account
   
5. You'll now see that the Authy app on both devices displays the same account and the same passcode appears on both devices simultaneously

Logging in with Authy

1. When you login and are prompted for Two Step login, select Google Authenticator as the authentication factor
2. Launch the Authy app on any device
3. Enter the code that is displayed in the app on the screen for two step login and click Verify