ÌÀÍ·Ìõ

Multi-factor authentication (MFA) is a security practice that requires more than one authentication method from different categories of credentials to verify a user’s identity. The factor in MFA refers to the process of verifying your identity. The most basic type of factor is your password.ÌýÌý

For example, when using MFA, you may sign in to an application/system using your password (what you know) and then using a separate six-digit number that is sent to your phone (what you have). â¶Ä¯â€¯Ìý

MFA adds an extra layer of security to your account. If hackers access a user’s credentials, they still require access to the user’s phone, Okta Verify app, or security key before hackers can access university data.ÌýÌý

No, you should keep DUO as an MFA option until the transition to OneVU and Okta Verify is complete later in 2025.

Okta Verify is an MFA app developed by Okta that protects your data, ensuring that only you can access your app accounts. You can install Okta Verify on mobile and desktop devices.  Ìý

You can use Okta Verify to confirm your identity using a push notification sent to your iOS or Android mobile device.ÌýÌý

For more information about Okta Verify, refer to the OneVU site. Ìý

Okta Verify supports many factors, such as passwords, security questions, login codes sent using mobile apps, third-party factors, and biometrics.

Refer to the section for a detailed list of supported factors. 

Regular Push NotificationÌý

When logging in, you'll receive a push notification on your registered mobile device:Ìý

• Tap Yes, It's Me to approve.Ìý

• Tap No, It's Not Me if it wasn’t you trying to log in.Ìý
  
  

Number Challenge Push NotificationÌý

This method adds an extra layer of verification:Ìý

• A number appears on your login screen.Ìý

• On your mobile device, you’ll be shown several numbers.Ìý

• Tap the number that matches what you see on your screen.Ìý

This method ensures you’re physically present and aware of the login attempt, reducing the risk of accidental approvals or phishing.Ìý

When you connect through a Virtual Private Network (VPN), your internet traffic is routed through a remote server—often in a different city, state, or even country. Ìý
Ìý
As a result, Okta Verify may detect the location of the VPN server instead of your actual physical location.Ìý
Ìý

This behavior is completely normal and expected. Okta uses location as one of many factors in its security checks. Ìý
Ìý
If something looks unusual—like a login from a location far from your usual pattern—you may be asked to complete additional verification steps.Ìý
Ìý

No need to worry! Just follow the on-screen prompts to verify your identity. It’s all part of Okta’s enhanced approach to keeping your account safe and secure.Ìý

Refer to the Okta Onboarding video for information on downloading, installing, and using Okta Verify apps for different devices.  Ìý

When you access your Okta Dashboard or a specific app protected by Okta Verfiy, that requires MFA, OneVU Dashboard prompts you to enroll in MFA. â¶Ä¯Ìý

After you enroll in MFA, you might have an option to enroll in another security method. VUIT recommends enrolling in an optional factor, if available. 

Yes, you may register multiple Okta Verify devices, multiple security keys, and biometrics for MFA. Ìý

If you select Keep me signed in before you enter your credentials, you will see fewer authentication prompts the next time you sign in. This allows you skip extra verification, or you may not be required to re-authenticate. â¶Ä¯Ìý

 Note: Do not select Keep me signed in on shared or personal computers.  Ìý

Perform the following to reset your factor: Ìý

1. Sign in to your OneVU account using your username and if required password.  Ìý

1. If prompted, add your second factor for authentication. Ìý

1. Once you’re logged in, select your name > Settings. â¶Ä¯Ìý

1. Select Remove for the factor you want to reset. Ìý

1. For security, you may be prompted to provide your password, second factor, or both.  Ìý

1. Select the factor you want to reset. Ìý

If you get stuck in a loop when attempting to register using SMS, Email, or QR code and do not get any code or push notifications, your device is not enrolled correctly.

You must reset the MFA from your account, uninstall Okta Verify on the device, install it again, and then set up the MFA. Ìý