Question:

Can I use the Authy mobile app for two step login with Okta? How do I enroll it?

Answer: 

Yes! Authy has been evaluated and approved for use by anyone at Notre Dame.

Authy functions as a replacement for Google Authenticator.  One of the benefits of Authy is that you can use it on multiple devices, such as both an iPhone and an iPad. 

Follow the steps below to enroll Authy for your mobile device. (You'll need to download it from your app store or the Authy website if you haven't already done so). 

Setup Authy for the first time

(Skip to Enroll Authy in Okta if you've previously configured Authy for other services)

1. Download and install Authy from your device's app store (for mobile) or at authy.com (for computer)
2. Select your country from the +code option, then enter your cell number
   
3. Enter your email address
   
4. You can either select the SMS or the Phone Call option
   
   
   
   • SMS
     
     1. Your cell phone will receive a text message with a passcode
     2. Enter the passcode if prompted in the Authy app, or the Authy app will automatically read the passcode and continue to the next step
   • Phone Call
     
     1. Answer the call
     2. Respond to the prompt
     3. Write down the code
     4. Enter the code in the Authy app

Enroll Authy in Okta

1. On your computer, go to okta.nd.edu and login with your username and password and a previously enrolled option.
2. Click on your name in the upper right corner
3. Click on Settings
4. Locate the Security Methods section of your settings.
   
   1. If you've previously enrolled Google Authenticator, you will need to Remove what you previously enrolled.
5. Click Set up for the Google Authenticator Mobile App.
6. Enter the password and click Verify, and complete two-step requirement
7. At the Set up security methods screen click Set up
8. Open Authy on your mobile device and click the + to Add Account
9. Click Scan QR Code and position the phone camera to view the bar code that appears on your computer screen
   
   
10. On the phone edit the Account Nickname and logo if desired, and tap Save
    
    
11. On the computer click Next
12. You'll be prompted for a code that is being displayed on your phone screen.  Type that code on the computer and click Verify.  Note: the number will change every 30 seconds

To Configure Authy on a Second Device

1. Install and launch the Authy app on the second device
2. Enter the cell phone number for your primary device
   Note: The cell number you initially use will be the primary number for your Authy account, even if you use multiple cell phones with different numbers
3. Choose a verification type
   
   
   
   • Use Existing Device (Recommended)
     
     1. On the device that you've previously configured Authy, launch the Authy app and you will see a prompt indicating a new device wants to be added as another device.  Tap Accept
        
     2. You'll see a Warning message asking you to confirm this action.  Type the requested response in the field provided and click OK.
        
   • SMS
     
     1. A text message will be sent to your primary device
     2. Enter the code in your new device
   • Phone Call
     
     1. Your primary device will receive a phone call
     2. Answer the call, then enter the code provided in your new device
4. If you entered a password for backups, tap your account icon and enter your backups password, then click Decrypt Account
   
5. You'll now see that the Authy app on both devices displays the same account and the same passcode appears on both devices simultaneously

Logging in with Authy

1. When you login and are prompted for Two Step login, select Google Authenticator as the authentication factor
2. Launch the Authy app on any device
3. Enter the code that is displayed in the app on the screen for two step login and click Verify

Note: If you replace or upgrade the device that the Authy app. is installed on, the app. will cease to work.  For this reason, we recommend you enroll at least one additional option to be used as a backup, such as SMS (text message) or Voice Call. For information on other options please see KB0017212.