Migrate Friend Account to Okta

Environment

U-M Friend accounts, Okta Sign In

Issue

How to migrate an active Friend account (those that have signed in at least once since January 1, 2025) to Okta.

Resolution

  • Friend accounts that have signed in at least once since January 1, 2025 can migrate their account to Okta and save a new password.
  • You must have access to the email address associated with your Friend account.

If you do not meet the above criteria, you must create a new Friend account.

If you see a message recommending you enroll in Okta prior to February 25, note that this does not apply to Friend accounts. Early enrollments are for U-M uniqname account holders. Attempts to complete Okta enrollment for Friend accounts prior to Feb 25, 2026 will result in an "access denied: friend check denied" error.

Migrate an Active Friend Account

  1. Navigate to the sign-in page for a service you previously accessed with your Friend account.
  2. Enter your Email and then click Next.
  3. Click the Email option. 
  4. Click Send me an Email. A message is sent to your email address.
  5. Open the email message and click Sign in.
  6. Enter a new password and re-enter the password in the fields provided.
  7. Click Next.
  8. You will receive an email notifying you that your password has been changed.
  9. Optional but recommended:  To add your name to your Friend account, go to Personal details in  your Okta profile. Click Edit to add or update your First and Last names.

 

Additional Information

Note: If you don't find your email from Okta, please check your spam folder.

Need additional information or assistance with Okta? Michigan Medicine affiliates, contact HITS. Other U-M affiliates, contact the ITS Service Center.

Print Article

Related Articles (2)

This article explains how to edit the first and last name associated with your Friend Account.

Related Services / Offerings (1)

This Service provides an account which allows someone who does not have a U-M uniqname and UMICH password to authenticate to the U-M computing environment; to log in to the environment and be identified. It does not automatically authorize that person to use any services.