Starting 2/25/26, Okta Verify will be the new primary Multifactor Authenticator (MFA) for services provided by Michigan Medicine and main campus. Management of your authenticators, whether it be Okta Verify, Yubikey, or other available options, can all be done self-service directly via your account on the Okta portal. If you need to perform the following tasks, you can follow these instructions to complete those tasks.

• I need to add another device to my account, for use with the Okta Verify app
• I need to reactivate the Okta Verify app because...
  • I got a new phone
  • I deleted the Okta Verify app
  • I removed my UMICH account from the Okta app
• I need to remove an obsolete device from my Okta account

Note: Okta Hard Tokens cannot be registered directly in Okta. Instructions for how to register an Okta token can be found here: KB0032266 - Enroll Okta Hardware Token

EPCS users: If you are setting up an Okta EPCS account for the first time or switching to a new device, first contact your EPCS liaison to ensure you are properly provisioned.
EPCS Liaisons: Refer to the information in the article below to provision new accounts or enroll users on new devices. KB0031290 - Okta EPCS - Provision EPCS Devices

Log in to an Okta Account

1. Sign in to Okta End User Settings and then follow the applicable steps below to add or remove a device.
2. 1. If you are not able to approve the Multi-Factor Authentication (MFA) request due to an issue with the device, or if you don’t have another Multi-Factor Authentication (MFA) device you can use to verify the request, chat or call the HITS Service Desk for assistance. They can issue a Temporary Access Code, which will activate a new one-time option for you to use upon your next login.

Add a New Okta Verify Device

1. Install the Okta Verify application to your device (if needed).
   • Open the app store on your mobile device, search for 'Okta Verify', and install the app.
     • NOTE: Only the Okta Verify app will be used. Do not install any other Okta apps you see in the app stores (such as Okta Mobile, Okta Personal, etc.).
2. Click Security methods in the left sidebar.
3. Click + Set up another in the Okta Verify section.
4. Enter your UMICH password on the Okta Sign-In page.
5. Click Okta Verify - Set up Another.
6. Follow the instructions that display to set up Okta Verify on your new device.

Remove an Okta Verify Device

1. Click Security methods in the left sidebar.
2. Click Remove next to the applicable MFA device listed in the Okta Verify section.

Note: If you have multiple devices with the same name, you can check the enrollment time or the last used time to determine which one needs to be removed. 

3. Click Yes to confirm you wish to remove the device.
4. Sign in and complete multi-factor authentication, if prompted.