Starting on February 25th 2026, Michigan Medicine will be cutting Multifactor Authentication services over to use Okta instead of DUO. Identity Management in coordination with ITS is able to proxy the authentication through Okta while still maintaining the existing Identity Provider. This allows us to adopt Okta Verify for our services without having to update the configuration of over 200 individual applications, which would require coordination with each of our application owners. While Michigan Medicine will still need to coordinate an eventual migration of its applications to a new IdP, this allows us the ability to compartmentalize those efforts in a dedicated project. ITS will be taking a similar plan where they will eventually be working with their Shibboleth application owners to eventually move to Okta SSO. 

Current Login Page

Future Login Page

Detailed login process for applications using Weblogin is here: KB0032735 - Okta IdP - Login Experience

For applications configured using Entra as the IdP can be found here: KB0032733 - Entra IdP Login Experience