Okta Enrollment

WARNING: The enrollment must be done from a desktop or laptop COMPUTER and you will need to have your iOS or Android mobile device handy.

NOTE: New or additional factors can only be added if you have an active factor in place to identify your identity. A complete reset requires you to contact the IT Support HelpDesk.

  1. What is Okta MFA?

  2. How are we rolling this out to campus?

  3. What kind of factors can be used?

  4. How do you enroll in Okta MFA?

  5. How do you update or reset your Okta MFA factors?

  6. How do I switch between factors at login?

What is Okta MFA?

Okta Multi Factor Authentication (MFA) is similar to the Two-Factor Authentication system that we used to protect sensitive data in myTCU when you were off campus. MFA is an extra layer of security used to make sure that people trying to gain access to an online account are who they say they are.

A user will enter their username/password and instead of immediately gaining access, they will be required to provide a PIN (or approve the request via push notifications on an app) to move forward just like most banking applications.

How this be launched out to campus?

We will be rolling Okta MFA out to every tool that is current protected by the Okta SSO login pages. We will add Okta MFA to one application at a time and communicate to the user base before the change to allow them to complete the enrollment.

Don’t worry since you only have to enroll once. This means that when we roll Okta MFA out to other products that you will already be setup and ready to go.

What kind of factors can be used?

We have elected to allow you three different factors to use with the new system.

  1. You can use the Okta Verify App on your mobile device to receive a PUSH notification that will allow you to approve the verification request.
  2. You can use the Okta Verify app on your mobile device to get a CODE (it will refresh every 30 seconds) that you can enter to complete the verification process.
    • NOTE: This does not work for the VPN Client but will for other protected services.
  3. You can receive an SMS text message on a cell phone that you can enter to complete the verification process. 

How do you enroll in Okta MFA?

Enrollment is a simple process that requires you to have a mobile device and/or your cell phone available.

  • Click the Begin Enrollment button at the top of the page.
    • NOTE: Start the enrollment from a laptop or desktop computer and have your iOS and/or Android mobile device handy. 
  • When prompted for credentials enter your TCU username and password.

  • You will be presented with the option to enroll in Okta Verify and SMS. Click Okta Verify to begin.
  • Select the type of mobile device that you have by clicking the appropriate logo.
  • Download the Okta verify app on that device and click Next.
  • Launch Okta Verify application on your mobile device and select Add an account.
    • NOTE: You may be asked to turn on notifications and grant access to the camera on your phone which you want to agree to.
  • Your camera will popup and you will need to scan the QR code that comes up on the computer screen.
  • You have now been enrolled in Okta Verify. Proceed with the steps below to complete the SMS enrollment.

Now Finish the SMS Enrollment

  • Click the SMS Authentication setup button to enroll in the text messaging option.
  • Select your country, enter your cell phone number and click send code.
  • Once you receive the text message from Okta, enter the PIN and click verify.

  • Once you have completed enrollment on both pages you will be sent to our Enrollment Success page.

How do you update or modify your enrollment settings?

  • Enter your TCU password again.
  • Select the option that you would like to receive verification from (Okta Verify, SMS, or Enter Code from the app).
  • If you selected Okta Verify or Enter Code then use the app on your phone to approve the verification. If you selected SMS, then enter the PIN that you received on your cell phone.
  • Once you are in, scroll down to the extra verification section and remove or setup new factors.
  • If you have upgraded to a new device and can’t update your factors, you will need to reach out to the IT Support HelpDesk and ask for your Okta MFA account to be reset.  We will validate your identity and then process an MFA reset request for you. 

How do I switch between the different factors?

When the Okta verify page comes up it will always display the last factor that you used to connect to the system.  If you want to switch to a different factor, all you have to do is click on the drop down arrow next to the circular icon.

If you have the Okta Verify option selected, you can also click the “Or enter code” link to enter the rolling code that you find when you open the Okta Verify app on your mobile device.