Question
What options or factors can I enroll for Okta?
Answer
You can enroll each factor and assign it to a specific device (e.g. smartphone, office phone, etc.) once for each option. For instance, you can install and configure Okta Verify on only one cell phone OR tablet; only one phone number configured for a Voice Call, etc.
- Okta Verify (similar to Duo app) - Push or Passcode
- Google Authenticator App
- Text Message Code (SMS)
- Voice Call
- Security Key (AKA YubiKey)
You'll have the best experience by installing the Okta Verify app on your smartphone or tablet when two step login is required. Okta Verify gives you options to use even when you are not able to access wifi or cell service on that device.
We recommend you configure at least two options so that if you don't have access to one device, you can still access services by choosing an alternate factor.
Okta will only allow you to enroll once for each of the factors listed above. If you have multiple devices that can be configured, you'll need to consider the best mix of configurations to meet your needs. Some options you can consider:
- If you install Okta Verify on your smartphone, you cannot also configure the same application on your tablet. However, you could install Google Authenticator on your tablet and enroll that. Both Okta Verify and Google Authenticator can generate a passcode to use when those devices are offline, making them excellent options for those traveling outside the US.
- If you have both an iPhone and an iPad, you can enroll your phone for SMS (text message) and configure Text Message Forwarding so that both the iPhone and iPad simultaneously receive the text.
- If you've configured your cell phone for Okta Verify and/or SMS, you don't need to also configure it for a Voice call. Configure either your office or home phone for Voice call instead.
- If you prefer to receive a Voice call on your cell phone, configure either Okta Verify or Google Authenticator on your tablet.
- If your cell phone is not a smartphone, configure it for SMS, and your office or home phone to receive a Voice Call.
- If you share an office phone with coworkers, each can choose to receive a Voice Call to that number.
- A Secure Key can attach to your keychain and be inserted in the USB-A port of any computer you need to login to and you'll simply tap it when prompted for two step.
- If you want to receive a Voice call on your desk phone and your home phone, you can request that Single Number Reach (SNR) be activated for your desk phone, and then configure your home or alternate phone as a second destination.
- The Okta Verify application is available for iOS, Android and Windows mobile devices.
- The Google Authenticator application is available for iOS, Android and Blackberry mobile devices.