Upcoming changes to the login experience

Body

Update - Starting June 10, 2025, the university has discontinued the option to add SMS (text message) or Voice Call verification methods for multi-factor authentication. Existing users who have SMS Authentication or Voice Call Authentication configured for MFA will still be able to log in using those methods until further notice.

Overview

Technology Services will be upgrading the university's authentication service from Okta Classic to Okta Identity Engine on August 5, 2025. This upgrade will enhance accessibility, streamline the login and account setup process, expand account recovery options, and provide more flexibility with Multi-Factor Authentication (MFA) options.

What to expect

The upgrade is not expected to cause any interruption to accessing your university account or systems. You will not be prompted to change your password or MFA as part of this upgrade process.
If you do not have a secondary email address set up, you may be prompted to provide one the first time you sign in after the upgrade. We recommend adding one to use for account recovery.
If you are logged in during the upgrade, your login session will still remain active. When you log in after the upgrade, your default MFA selection might be cleared. Select the MFA method you’d like to use and it will be saved as the default method in your browser.
More information detailing what changes to expect are explained below.

Changes to the login page

Here's what the updated login page will look like at login.pugetsound.edu.

image of university login page with username/password fields

Improved login page features

The option to reset a forgotten password and other self-service resources will be more prominent
The first-time account setup process will be easier with a guided, step-by-step experience
You will be able to toggle the visible of the password field by clicking the eye icon
When creating a new password, you will be provided with dynamic feedback on whether your password meets the requirements
You will be able to easily switch between your configured MFA methods by selecting "Verify with something else" when prompted for MFA

Other login page changes

Instead of seeing the checkbox option "Do not challenge me on this device for the next 12 hours" after logging in, you will instead see a checkbox option "Keep me signed in" before logging in
Your security image will no longer appear after entering your username
When being redirected to the login page from another system, you will no longer see the "Connecting to [Puget Sound system]" banner

Changes to Multi-Factor Authentication (MFA)

Terminology changes

For MFA, extra verification methods are now referred to as security methods. You will see the new terminology reflected in your account settings, when setting up MFA, and when prompted for MFA.

Forgotten Password Question is now referred to as Security Question. You can manage your security question under the "Security Methods" section in your account settings.

Consolidation of SMS and Voice Call MFA

The security methods SMS Authentication and Voice Call Authentication will be combined into a single Phone security method. Select "Phone" when using either of these methods to verify your login. If you had different phone numbers set up, both options will appear and the last four digits of your phone numbers will be displayed.

example of how to select which phone security method to use from the options

After selecting the phone number, you will have the options to Receive a code via SMS or Receive a voice call instead.

verify with your phone - receive a code via sms or receive a voice call instead

IMPORTANT - Please note that phone-based MFA will be gradually retired and we strongly recommend setting up a security method such as Okta Verify, Google Authenticator, and/or Security Key or Biometric Authentication.

Okta Verify enhancements

You will be able to set up Okta Verify on multiple devices. To do so, go to the "Security Methods" section in your account settings and click "Set up another" if you would like to add Okta Verify on another mobile device.

It will be easier to select whether to Get a push notification or Enter a code when using the Okta Verify security method as they will show as separate security methods to select.

example of how to select whether to enter a code with okta verify or to receive a push notification from okta verify

Instead of only having the option to set up Okta Verify by scanning a QR code, you will also be able to set it up by selecting "No, Sign In Instead" and entering "login.pugetsound.edu" as the sign-in URL directly in the Okta Verify app when going through the steps to add an account.

Changes to account recovery

If you have Okta Verify or Google Authenticator enrolled as security methods, you will now also be able to use those to initiate the process to reset a forgotten password or to unlock an account. Previously, you needed to have a secondary email address or phone number set up.

image displaying multiple security methods that can be used to reset your password such as email, google authenticator, and okta verify

You will still be prompted to answer your security question at the next step.

example of security question and blank answer field

Changes to mobile access

The Okta Mobile app will no longer be supported. To access university systems on a mobile device, simply go to login.pugetsound.edu in a browser. You may also tap “Launch Dashboard” within the Okta Verify app.

Please note that the Okta Verify app is still supported and is the recommended option for MFA.