Question
How does two step login work with Okta?
Answer
Two step authentication reduces the ability of a hacker to access your account and data, by requiring two methods to verify you:
- The NetID and password that you know
- A phone, tablet device or Yubikey that you have possession of
A hacker may gain access to your NetID and password, but it will be more difficult for them to access that device as well.
So how will I login?
- When you login to an ND service protected by two step (e.g. Gmail, Sakai, Box, and many others), you will enter your NetID and password.
- If the system needs to verify your login, you will then be presented with a second screen allowing you to select which device and method you wish to use as your "second factor". That screen will look something like:
- If you are using a computer or device that is NOT shared with others, we recommend you check the box, Do not challenge me on this device for the next 30 days
- This will store information on that device or browser so that you won't be prompted for Two Step again until 30 days have elapsed.
- Note: Do NOT check this box on a shared computer such as a classroom or lab, as it may allow others using that computer to access your account.
- If you wish to use a different factor that you've enrolled, click the arrow to the right of the Okta logo to display the additional options:
- Select the option you wish to use.
- Depending which device you selected, you will receive a notification on that device that you will need to respond to.