Enroll in Okta Using Only a Mobile Device If You Previously Used Duo

Environment

Okta Sign In, supported mobile platforms, iOS, Android

Issue

How to enroll in Okta using only a mobile device and complete U-M sign in if you previously used Duo and have not yet enrolled in Okta.

Resolution

If you have a computer, we recommend that you follow the steps in Getting Started With Okta: Enroll With the Okta Verify App for the best user experience.

Note: These instructions are for first-time enrollment in Okta. If you’ve previously enrolled in Okta and need to transfer your account to a new device, but do not have a backup device (e.g., replacing a lost phone), contact your technical support: Michigan Medicine affiliates, contact HITS. Other U-M affiliates, contact the ITS Service Center or submit a ticket for assistance.

When you see the new Okta Sign-in page (replaces U-M Weblogin), if you are required to use MFA and have not yet enrolled in Okta, you must follow the steps below to enroll your account in Okta before you can sign in. 

These instructions are for completing the enrollment process using only a mobile device. Note that the mobile device you’re using must be capable of receiving SMS messages.

  1. Navigate to Wolverine Access (opens in new window).
  2. Enter your uniqname or email address and tap Next.
  3. Enter your UMICH password and tap Verify.
  4. Tap Duo - Set up.
  5. Tap Enroll and complete Duo authentication.
  6. Tap Okta Verify - Set up.
  7. Tap the option to download the Okta Verify app if you have not already downloaded it.
  8. Enter your phone number and tap Send SMS.

Note: Only standard US phone numbers are supported (no international or toll-free numbers).

  1. Open the SMS message and verify the link is to an https://okta.umich.edu address, then tap the link to open it.
  2. The Okta Verify app opens on your mobile device (you may first be prompted to allow the app to open).
  3. If desired, tap Enable to enable biometric authentication. Otherwise, tap Not Now and enter your device's PIN, if prompted.
  4. If you do not have multiple Okta accounts, skip this step. If you have multiple Okta accounts, a Set as Default Okta FastPass Account? screen may display. You can choose to set your U-M uniqname account as your default Okta account, which can speed up the sign-in process. Or you can tap Skip if you do not want to set your U-M account as the default.
  5. Tap Done.
  6. You have completed Okta Enrollment.

Please consider installing the Okta verify app on another device in case you lose access to your current device. See instructions to Add, Remove, and Reactivate Devices with the Okta Verify App.

Additional Information

If you're enrolling with a hardware token or a Yubikey, see Obtain and Enroll an Okta Hardware Token For Multi-Factor Authentication or Enroll a YubiKey (Security Key) for Okta Multi-Factor Authentication. 

Need additional information or assistance with Okta? Michigan Medicine affiliates, contact HITS. Other U-M affiliates, contact the ITS Service Center.

Print Article