Okta - Frequently Asked Questions


Instructions

 

What is Okta?

Okta is a cloud-based identity and access management (IAM) service that provides secure, centralized access to applications and systems using a single set of credentials. In Michigan Medicine, the primary service we rely on Okta for is multifactor authentication (MFA).

 

Why do we need Okta?

Extra security to protect yourself and any sensitive data you may access through some systems. It's adding a physical element to a digital password. Someone needs both your physical method to login and your password to get a hold of your account which is much harder than simply having the password.

 

What services require Okta?

This list is fairly extensive and includes (but is not limited to):

  • Wolverine Access (and many other ITS services)
  • VPN (Cisco Anyconnect)
  • M365
  • Intune

 

Do you need to be on VPN to Enroll in Okta?

No, none of the sites needed to setup Okta require VPN. Okta is a cloud-based solution and is accessible from anywhere.

 

Is there a difference between EPCS for Okta and Regular Okta?

Yes. EPCS is used for providers to prescribe controlled substances (it stands for Electronic Prescribing for Controlled Substances). The account used for EPCS is separate than the standard account you use for normal MFA. If you need assistance enrolling in EPCS for Okta you'll need to contact your unit/departments local EPCS Liaison. Information can be found here.

 

How do I enroll in Okta?

You can enroll with any phone, tablet, or hardware token.

Depending on your device you can find instructions below:

First Time Enrollment

Hardware Token

 

Each time I sign into the VPN it sits for a long time but then tells me login failed whats happening?

The VPN is waiting for you to accept the Okta push it sent to your primary Okta device. After a period of time it will time out and that's what causes the login failed message to appear.

 

Can I use Okta without using a mobile device or phone call?

For those who cannot use the Okta Verify mobile app or landline options, Okta Hardware Tokens provide an alternative method for two-factor authentication. The Okta Hardware Token is a standalone hardware device that generates a passcode as needed for U-M systems and resources. Hardware token purchases are funded by Information and Technology Services (ITS). These are available by request through the Tech Shop. <https://techshop.umich.edu/910044.html> or via HITS Help Me Now locations.