|
Start here:
- Install the Okta Verify app on your mobile device
- Log into the myapps.uwrf.edu portal on a different device
- If you're not prompted to enroll immediately, click on your name and select Settings
- Add your account to the Okta Verify mobile app (scan the QR code)
- Configure your device (optional)
- Repeat to install another device (a good idea)
Detailed enrollment process instructions for your specific device
|
|
Some background information...
What is multi-factor authentication (MFA)?
- Essentially, MFA adds layers of security to your account. At UWRF, besides logging in with something you know (your password), you also log in using something you have (e.g., a phone). And if your phone is secured (e.g., with a PIN or fingerprint), security is even better! So even if someone gets a hold of your password, they still can't log into your account.
Why does UWRF employ MFA?
- It is included in a University of Wisconsin System Information Security policy (1030) with its accompanying procedure (1030.A).
- In this era of social engineering, it is just a good idea. Adding a second layer of security helps prevent anyone but you from logging in even if they know your password.
- "Based on our studies, your account is more than 99.9 percent less likely to be compromised if you use MFA," said Alex Weinert, Microsoft’s Group Program Manager for Identity Security and Protection.
When to enroll in MFA?
- Employees enroll immediately after your Falcon Account is activated.
- Students after you have been admitted.
What are my MFA Options?
Most people use the Okta Verify moble app. It is very easy to use and even if you are in an area where you don't have cellular data or Wi-Fi coverage, your smart device still lets you in by using the authentication passcode feature.
In general, you'll want to enroll more than one device just in case your preferred device is unavailable when you need it most. For example, you can install the Okta Verify app on your smart phone AND your tablet (devices that are around you when you log into things) and then enroll those two devices.
| Method |
How It Works |
Device |
Data Usage / Cost |
Limitations |
| Okta Verify mobile app |
Okta's free mobile application displays a login request notification on your smartphone or tablet. Tap Approve to authenticate. If cell data and Wi-Fi are unavailable at the time, the app can generate a passcode in order to continue. |
Mobile Phone or Tablet |
Each notification is only 2KB of data. |
Requires cellular data or WiFi for notification; no data required for passcodes |
| FIDO2 hardware token |
Plug the token into your device and press the button when prompted |
USB FIDO2 token |
FIDO2 tokens can be purchased through your usual technology channels |
Requires USB ports |
| Yubikey hardware token |
Plug the token into (or hold near if using NFC) your device and activate when prompted |
Yubikey |
Yubikeys can be purchased through your usual technology channels |
Requires USB port or NFC capability; requires passcode setup for each device you log into |
| Okta Verify desktop app |
Okta's application will display a prompt on the computer you're logging in with when the FastPass option is selected. |
Windows or macOS computer |
No extra cost |
Computer must be registered as a factor before logging in. Limited compatibility with some non-browser applications on macOS |
Enroll your device(s).