Add, Remove, or Reactivate Devices with the Okta Verify App

Environment

Okta

Issue

• I need to add another device to my account, for use with the Okta Verify app
• I need to reactivate the Okta Verify app because...
  • I got a new phone
  • I reset my phone
  • I deleted the Okta Verify app
  • I removed my UMICH account from the Okta app
• I need to remove an obsolete device from my Okta account

Resolution

You can add or remove Okta Verify devices from Okta Account Settings.

1. Sign into Okta End User Settings and then follow the applicable steps below to add or remove a device.
   1. If you are not able to approve the Multi-Factor Authentication (MFA) request, click Verify with Something Else and choose another device that you can verify the request with.
   2. If you don’t have another Multi-Factor Authentication (MFA) device you can use to verify the request, call or chat the ITS Service Center for assistance.
   3. Note: If you haven't used Okta MFA before, you won't be asked for MFA and can continue with the setup.

Add or Reactivate an Okta Verify Device

1. Install the Okta Verify application to your device if you have not already. 
   1. Open the app store on your mobile device, search for 'Okta Verify', and install the app.
      • NOTE: Only the Okta Verify app will be used. Do not install any other Okta apps you see in the app stores (such as Okta Mobile, Okta Personal, etc.).
2. In the Okta End User Settings, Click Security methods in the left sidebar.
3. Click + Set up another in the Okta Verify section.
4. Enter your UMICH password on the Okta Sign-In page.
5. Click Okta Verify - Set up Another.
   1. Note: Adding your phone number in the Phone section will not activate Okta Verify. Please ensure you are in the Okta Verify section. 
6. Follow the instructions that display to set up Okta Verify on your new device.
   1. If scanning the QR code is not working click Can't scan? below the QR code.
   2. You can then choose to be sent a setup link by email or text message.
7. Please follow the steps below to remove any old devices from your account. 

Remove an Old Okta Verify Device

You need at least one multi-factor device added to your account at all times. Do not remove your final Okta Verify device, follow the steps above to add a new one first!

1. Click Security methods in the left sidebar.
2. Click Remove next to the applicable MFA device listed in the Okta Verify section.

Note: If you have multiple devices with the same name, you can check the enrollment time or the last used time to determine which one needs to be removed. 

3. Click Yes to confirm you wish to remove the device.
4. Sign in and complete multi-factor authenticaion, if prompted.

Additional Information

Hardware token or Yubikey

• If you're enrolling a hardware token or a Yubikey see:  Obtain and Enroll an Okta Hardware Token For Multi-Factor Authentication or Enroll a YubiKey (Security Key) for Okta Multi-Factor Authentication. 

Need additional information or assistance with Okta? Michigan Medicine affiliates, contact HITS. Other U-M affiliates, contact the ITS Service Center.