Question
How does two step login work with Okta?
Answer
Two step authentication reduces the ability of a hacker to access your account and data, by requiring two methods to verify you:
- The NetID and password that you know
- A phone, tablet device or Yubikey that you have possession of
A hacker may gain access to your NetID and password, but it will be more difficult for them to access that device as well.
So how will I login?
- When you login to an ND service protected by two step (e.g. Gmail, Sakai, Box, and many others), you will enter your NetID and click Next
- If you are using a computer or device that is NOT shared with others, you can check the box, Keep me signed in
- This will store information on that device or browser so that you won't be prompted for Two Step again until 30 days have elapsed.
- Note: Do NOT check this box on a shared computer such as a classroom or lab, as it may allow others using that computer to access your account.
- If you are using a computer or device that is NOT shared with others, you can check the box, Keep me signed in
- You'll then be prompted for your password. Click Next after entering it.
- If the system needs to verify your login, you will then be presented with a second screen allowing you to select which device and method you wish to use as your "second factor". That screen will look something like:
- You will then see additional prompts depending on which option you selected.
- Once you've completed the authentication process you'll be logged onto the application you were trying to access.