Question
What options or factors can I enroll for Okta?
Answer
You can enroll each factor and assign it to a specific device (e.g. smartphone, office phone, etc.) once for each option. For instance, you can install and configure Okta Verify on only one cell phone OR tablet; only one phone number configured for a Voice Call, etc. Click any of the links below for instructions on enrolling that option.
- Okta Verify - Push or Passcode
- Google Authenticator App OR Authy Mobile App, OR Authy Desktop App
- Text Message Code (SMS)
- Voice Call
- Security Key (AKA YubiKey)
For general instructions on enrolling additional factors, please see How do I Add or Change What I've Enrolled in Okta?
You'll have the best experience by installing the Okta Verify app on your smartphone or tablet when two step login is required. Okta Verify gives you options to use even when you are not able to access wifi or cell service on that device.
Note: If you enroll either Okta Verify or Google Authenticator you MUST enroll at least one additional option. We recommend you enroll your phone number for SMS.
We recommend you configure at least two options so that if you don't have access to one device, you can still access services by choosing an alternate factor. This is especially important before you upgrade or replace your cell phone. Both Okta Verify and Google Authenticator will need to be re-enrolled if you get a new device, while your phone number usually remains the same and can continue to be used when you upgrade your replace your phone.
Okta will only allow you to enroll once for each of the factors listed above. If you have multiple devices that can be configured, you'll need to consider the best mix of configurations to meet your needs. Some options you can consider:
- If you install Okta Verify on your smartphone, you cannot also configure the same application on your tablet. However, you could install Google Authenticator on your tablet and enroll that. Both Okta Verify and Google Authenticator can generate a passcode to use when those devices are offline, making them excellent options for those traveling outside the US.
- If you have both an iPhone and an iPad, you can enroll your phone for SMS (text message) and configure Text Message Forwarding so that both the iPhone and iPad simultaneously receive the text.
- If you have a computer used only by you, installing the Authy App allows you to generate a code by launching the app when you need to logon and respond to two step.
- If you've configured your cell phone for Okta Verify and/or SMS, you don't need to also configure it for a Voice call. Configure either your office or home phone for Voice call instead.
- If you prefer to receive a Voice call on your cell phone, configure either Okta Verify or Google Authenticator on your tablet.
- If your cell phone is not a smartphone, configure it for SMS, and your office or home phone to receive a Voice Call.
- If you share an office phone with coworkers, each can choose to receive a Voice Call to that number.
- A Secure Key can attach to your keychain and be inserted in the USB port of a computer you need to login to and you'll simply tap it when prompted for two step. (Note: A Secure Key will not work for authentication to the VPN).
- If you want to receive a Voice call on your desk phone and your home phone, you can request that Single Number Reach (SNR) be activated for your desk phone, and then configure your home or alternate phone as a second destination.
- The Okta Verify application is available for iOS and Android mobile devices.
- The Google Authenticator application is available for iOS and Android mobile devices.