Obtain and Enroll an Okta Hardware Token For Multi-Factor Authentication

Environment

University of Michigan, Multi-Factor Authentication

Issue

Obtaining and enrolling an Okta hardware token for multi-factor authentication (MFA).

  • Cost of Tokens are Covered by the University
  • Visit the ITS Tech Shop, on campus, to obtain an Okta Hardware Token
  • Order an Okta Hardware Token, online from the ITS Tech Shop
  • Completing Enrollment with an Okta Hardware Token

Resolution

Cost of Tokens are Covered by the University

The University will cover the cost of one initial Okta hardware token for each user (faculty including emeriti, staff, students, retirees, alumni, and sponsored affiliates). Shipping costs are not included. When you add a token to your cart, the list price will initially display, but it will be waived for your first token. Replacement tokens must be purchased at the current list price.

Obtaining an Okta Hardware Token, On Campus

  • Visit the ITS Tech Shop, in person to obtain an Okta Hardware Token.
  • Bring your MCard or another form of identification.

Order an Okta Hardware Token Online

For in-store pickup or shipment to US addresses:

  1. Navigate to the ITS Tech Shop - Security Tokens.
  2. Locate the Okta Hardware Token and click Add To Cart.
  3. From the Select Okta Token Recipient pop-up window, select the correct option then click Confirm.​​​​
  4. Click Checkout near the top-right of the screen. Alternatively, click the orange Shopping Cart icon and then click Checkout.
  5. Verify you've selected the appropriate shipping / fulfillment option (Store Pickup or UPS Shipping unless you need your device shipped to an building on the U-M Ann Arbor campus) and that you have completed all of the required fields (indicated with a red asterisk) correctly.
  6. Click Next, then select your Payment method. Note that selecting Credit Card will require you to click Continue to Credit Card Portal.
    1. Click Next - Payment Method, then click enter credit / debit information.
    2. Enter payment card information and click Submit Payment.
  7. Complete your checkout and look for a follow-up email from the Tech Shop.
  8. Okta hardware tokens will be automatically registered to your account during the purchase process.
  9. Once you have obtained the Okta Hardware token you are ready to sign in to Okta and complete MFA using the token.

For shipment to addresses outside the US:

  1. Please email the Tech Shop at techshop@umich.edu.
  2. Include the hardware token model you would like to purchase and your full shipping address.

Manually Enroll Your Token

In rare circumstances when a token is not automatically enrolled, you may need to add the hardware token registration number to your UMICH Account Management application.

To manually enroll your token after February 25, 2026, contact the ITS Service Center to obtain a Temporary Access Code to be able to sign in to Okta and complete these steps.

  1. Go to UMICH Account Management.
  2. Log in with your uniqname and UMICH password.
  3. Click Add an Okta Hardware Token.
  4. Enter the Token Serial Number (located on the back of your token) in the field provided.
  5. Click Enroll.

Additional Information

  • For Michigan Medicine users, hardware tokens are also available at Michigan Medicine Help Me Now locations.
  • Duo hardware tokens can't be used in Okta.
  • Only one Okta hardware token can be enrolled on the account at a time.
  • The Okta hardware token can be enrolled regardless of whether you have a Yubikey enrolled or not.
  • Okta tokens are expected to have a five-year lifetime; they do not have replaceable batteries.
  • If your token is already enrolled and you try to enroll it again, Okta will return an error.

Need additional information or assistance with Okta? Michigan Medicine affiliates, contact HITS. Other U-M affiliates, contact the ITS Service Center.

Print Article