Environment
Okta, Okta Verify, Multi-Factor Authentication
Issue
The Okta Verify Mobile app, Security Keys (e.g., Yubikey), and hardware tokens are encryption items subject to U.S. export control regulations. These items may be restricted in certain countries and may not be used in those regions or brought in by travelers. Okta authentications may also be blocked in regions subject to economic and trade restrictions.
Resolution
- Find out which countries are included and specific guidelines:
- Note that you must remove Okta Verify from devices and leave any hardware tokens behind before entering those countries where that is required.
- Details on Okta and other services being blocked due to economic sanctions can be found on the Safe Computing website.
- When Okta Authentications are being blocked, the Virtual Sites service can be used to access U-M resources from those areas.
Additional Information
The following areas (as of March 2026) are currently subject to export controls: Cuba, North Korea, Iran, Crimean region of Ukraine, Donetsk region of Ukraine, Luhansk region of Ukraine. You must check the U-M Research Ethics & Compliance site for current areas and full details.
Need additional information or assistance with Okta? Michigan Medicine affiliates, contact HITS. Other U-M affiliates, contact the ITS Service Center.