OKTA - YubiKey for MFA

To request an alternative method of MultiFactor Authentication (MFA) for OKTA, please place a Service Request:

The HelpDesk will close your Service Request after ordering the YubiKey, shipping should take approximately 1 week.

After receiving the YubiKey package, you will need to download and install the YubiKey Manager software in order to set a PIN on the device.

Download the YubiKey manager:
https://developers.yubico.com/yubikey-manager-qt/Releases/yubikey-manager-qt-latest-win64.exe
Install the program.
Navigate to the Start Menu> Yubico> YubiKey Manager. Right-click on it to "Run as Administrator".
When the program opens, insert the YubiKey into a USB port on your laptop.
Navigate to the Applications Tab in the YubiKey Manager application and select FIDO2.

Select "Set PIN" to configure a passcode for the YubiKey. *This step is required for TecMFA (laptop MFA when logging in).

Please create a ticket at https://helpdesk.aras.com with the Subject: Add user account to the OKTA YubiKey group.

Wait for HelpDesk confirmation of YubiKey group addition
Log into https://aras.okta.com/enduser/settings to add your YubiKey.
When logging in, you should be prompted to add the YubiKey into your account.
If that is not the case, click on your User in the top right of the page and select Settings.
Select Edit Profile, then Security Key: Set up Another in the Security Methods section.

Please confirm in the HelpDesk ticket created earlier, that you were able to successfully add the YubiKey into your OKTA account.

HelpDesk will initiate the installation of TecMFA if not already installed on your laptop. A toast notification will alert you to the installation status. Continue to the next step after the installation is complete.
- TecMFA adds MultiFactor Authentication (MFA) our end-user workstations.

Tap Ctrl+Alt+Del and Lock the laptop
Ctrl+Alt+Del again and enter your account credentials at the login screen
You will be prompted to setup MultiFactor Authentication, be sure to select Enroll Device for Offline. This will allow you to log into your laptop when you do not have an internet connection.
Once logged onto the laptop, please reply back to the HelpDesk ticket informing them that you successfully logged into your laptop with the YubiKey