Body
Environment
Okta, Okta Verify, Multi-Factor Authentication
Issue
The Okta Verify Mobile app, Security Keys (e.g., Yubikey), and hardware tokens are encryption items subject to U.S. export control regulations. These items may be restricted in certain countries and may not be used in those regions or brought in by travelers. Okta authentications may also be blocked in regions subject to economic and trade restrictions.
Resolution
- Find out which countries are included and specific guidelines:
- Note that you must remove Okta Verify from devices and leave any hardware tokens behind before entering those countries where that is required.
- Details on Duo and other services being blocked due to economic sanctions can be found on the Safe Computing website.
- When Okta Authentications are being blocked, the Virtual Sites service can be used to access U-M resources from those areas.
Additional Information
The following areas (as of February 2026) are currently subject to export controls: Cuba, North Korea, Iran, Sudan, Syria, the Crimean Peninsula, the Donetsk and Luhansk regions, and the Sevastopol region. You must check the U-M Research Ethics & Compliance site for current areas and full details.
Need additional information or assistance? Contact the ITS Service Center.