Add, Remove, or Reactivate Devices with the Okta Verify App

Environment

Okta

Issue

• I need to add another device to my account, for use with the Okta Verify mobile app.
• I need to reactivate the Okta Verify mobile app because...
  • I got a new phone.
  • I reset my phone.
  • I deleted the Okta app.
  • I removed my UMICH account from the Okta app.
  • I have Offload Unused Apps (iOS) or Archive Unused Apps (Android) turned on, and that feature removed the Okta Verify app.
• I need to remove an obsolete device from my Okta account.

Resolution

You can add or remove Okta Verify devices from Okta Account Settings (https://okta.umich.edu/).

1. Sign into Okta End User Settings and then follow the applicable steps below to add or remove a device.
   1. If you are not able to approve the Multi-Factor Authentication (MFA) request, click Verify with Something Else and choose another device that you can verify the request with.
   2. If you don’t have another Multi-Factor Authentication (MFA) device you can use to verify the request, call or chat the ITS Service Center for assistance.
   3. Note: If you haven't used Okta MFA before, you won't be asked for MFA and can continue with the setup.

Add or Reactivate an Okta Verify Device

1. Click Security methods in the left sidebar.
2. Click + Set up another in the Okta Verify section.
3. Enter your UMICH password on the Okta Sign-In page.
4. Click Okta Verify - Set up Another.
   1. Note: Adding your phone number in the Phone section will not activate Okta Verify. Please ensure you are in the Okta Verify section. 
5. Click "+Set Up Another" 
6. If you are using a computer, you will be shown a QR Code to scan. Otherwise, you will see options to get an activation link via text message or email. 
   1. If scanning the QR code is not working, click Can't scan? below the QR code.
      1. You can then choose to be sent a setup link by email or text message.
         1. When selecting the Text message option, you can send the setup link to any phone number. 
         2. When selecting the Email option, you can only send the setup link to your Umich email address or the secondary email address associated with your Okta account. 

Activate the app via QR Code

1. Install the Okta Verify app from your device's app store if you have not already. 
2. Open the Okta Verify App.
3. In the Okta Verify app, tap Add Account. (Or click the + button in the upper right hand corner).
4. Tap Organization.
5. Tap Skip on the "Import Account" screen.
6. Tap Yes, ready to scan and scan the QR code that displays on your computer.
7. We recommend allowing notifications and enabling biometric confirmations, but these settings are optional. 

Activate the app via Text Message/Email

1. Install the Okta Verify app from your device's app store if you have not already. 
2. Click on the activation link you received via text or email. 
3. You will be re-directed to the Okta Verify app to complete setup. 
4. We recommend allowing notifications and enabling biometric confirmations, but these settings are optional. 

Note: We do not recommend activating the Okta Verify App using the "Import Account" method.

Remove an Old Okta Verify Device

You need at least one multi-factor device added to your account at all times. Do not remove your final Okta Verify device, follow the steps above to add a new one first!

1. Click Security methods in the left sidebar.
2. Click Remove next to the applicable MFA device listed in the Okta Verify section.

Note: If you have multiple devices with the same name, you can check the enrollment time or the last used time to determine which one needs to be removed. 

3. Click Yes to confirm you wish to remove the device.
4. Sign in and complete multi-factor authentication, if prompted.

Additional Information

Installing Okta Verify Mobile App

When installing the Okta Verify app from your device's app store, confirm the name of the app reads Okta Verify exactly. There are other apps with similar names and appearances that will not work for U-M systems. If you are prompted for payment at any point, STOP and un-install the app. Okta Verify is free and does not require in-app purchases. 

Hardware token or Yubikey

• If you are enrolling a hardware token or a Yubikey see:  Obtain and Enroll an Okta Hardware Token For Multi-Factor Authentication or Enroll a YubiKey (Security Key) for Okta Multi-Factor Authentication. 

Need additional information or assistance with Okta? Michigan Medicine affiliates, contact HITS. Other U-M affiliates, contact the ITS Service Center.