Question

What options or factors can I enroll in for the Okta Multifactor Authentication (MFA) requirement?

Answer 

We recommend using Okta Verify as your MFA method; it is the most reliable and offers the most features, including device health checks and FastPass for quick sign-ins using biometrics. 

Below are the different multifactor authentication options you can enroll in for signing into your account. Click any of the links below for instructions on enrolling in that option.

• Okta Verify - Push notifications or verification codes available on the application MOST RELIABLE AND RECOMMENDED
• Okta FastPass - Quick and seamless login using biometrics on your computer or mobile device MOST RELIABLE AND RECOMMENDED (for computers)
• Google Authenticator App OR Authy Mobile App
  
• Security Key (AKA YubiKey)
• Apple Devices with the Apple Passwords App

*Note: It is imperative that you install your MFA options on two devices in case your primary device becomes unavailable. If device #1 (a smartphone, for example) gets lost or stolen, you can then use device #2 (laptop or tablet) to sign into your account. Otherwise, you will not be able to sign in until you connect with the Service Desk, go through ID verification, and have your security methods reset.

For general instructions on enrolling additional factors, please see How do I Add or Change What I've Enrolled in Okta?

Both Okta Verify and Google Authenticator will need to be re-enrolled if you get a new device; you will need to have a separate device available to assist you in setting up your new device.

If you will be traveling internationally, see this article for additional recommendations.