JMU Information Technology (IT) is currently implementing Okta, a modern, cloud-based, Identity and Access Management (IAM) platform that will replace Duo. Once Okta goes "live," it will:

• Manage all eIDs and passwords at JMU and provide secure access into every major system
• Provide a jumping-off point called MyJMULogin where you can access many JMU systems
• Handle multi-factor authentication (MFA) through the Okta Verify app

Read below for important actions you must take to be ready for Okta!

Here are the significant differences with Okta:

• You will only need to change your password once per year.
• An app called Okta Verify will replace Duo Mobile.
• SMS (text messages) will no longer be accepted as an authentication factor (see FAQ below).
• Okta passwords will require at least 16 characters.
• If you currently use a Duo hardware token (D100), you must exchange it for a Yubikey.

Your invitation to enroll in Okta is an email in your JMU inbox with subject, "Welcome to JMU Okta!" The email contains an Activate Okta Account link, referred to below as your activation link. You must have at least one compatible device with you to begin enrollment. Most people will enroll with a smartphone running iOS 17, Android 12, or newer. If you do not have a smartphone that can be updated to these specs, you must obtain a Yubikey hardware token. When ready, choose one enrollment method below.

Enroll from a Computer:

1. Click the activation link in your invitation email. Misplaced the email, or link expired?
2. Some people (applicants and some alumni) will be asked to set a password. If applicable, click Set Up and set your Okta password before proceeding.
3. If you are enrolling a Yubikey, follow this link and complete these steps.
4. To enroll a smartphone, click Set Up under the Okta Verify description.
   1. A QR code will appear. Keep this screen open.
   2. On your smartphone, download the Okta Verify app from the App Store (iOS) or Google Play (Android).
   3. Open the app, click Get Started, and click through the next two prompts.
   4. After clicking Add Account, select Organization (Work, school, company) as the Account Type.
   5. Skip Add Account from Another Device.
   6. On the Do You Have a QR Code? screen, click Yes, Ready to Scan.
   7. Scan the QR Code from the step above.
   8. Finish the Okta Verify setup process. JMU recommends that you Allow Notifications for push authentications.
5. When you have enrolled at least one device, your Okta enrollment is complete.

Enroll from a Mobile Device:

1. Download the Okta Verify app from the App Store (iOS) or Google Play (Android).
2. From your invitation email, click your activation link. Misplaced the email, or link expired?
3. Some people (applicants and some alumni) will be asked to set a password. If applicable, click Set Up and set your Okta password before proceeding.
4. Click Set Up under the Okta Verify description.
5. Select whether you want to be sent an email enrollment link or a text message enrollment link.
6. When you receive your email or text message, click the enrollment link inside.
7. Finish the Okta Verify setup process. JMU recommends that you Allow Notifications for push authentications.

Once you've enrolled in Okta with at least one device, you're ready! Do not remove Duo Mobile from your device(s) - Duo will continue to authenticate logins until Okta automatically takes over during Spring Break. If you need to enroll a second device or a hardware token, or if you replace a device you've enrolled (e.g., you get a new phone), please return to Okta to update your information or reach out to the IT Help Desk for assistance.