Managing Multi-Factor Authentication (MFA)

Overview

Multi-factor authentication (MFA) is a security measure that helps to protect your university account.

Choosing a security method

The university supports the following security methods for use with your Puget Sound account:

• Okta Verify (recommended): Approve a push notification or enter a one-time code via this mobile app
• Google Authenticator/Authenticator App: Enter a one-time code generated by any authenticator app
• Security Key: Insert a FIDO2 hardware token (e.g. YubiKey) into a device
• Biometric Authenticator (limited usage): Use fingerprint or facial recognition (e.g. Touch ID, Windows Hello) in a specific browser on a device

Okta Verify is the recommended security method due to its reliability and ease of use. Technology Services strongly suggests that you configure at least two of these options. This will allow you to use an alternate security method if one is unavailable to you, such as when you get a new phone. If you have multiple security methods configured, you will still be able to verify with something else. 

Setting up a security method

From login page

If you are prompted to set up a security method when you log in to your Puget Sound account at login.pugetsound.edu, follow these instructions.

1. Click Set up to enroll in your preferred security method for multi-factor authentication (MFA).

2. Follow the instructions on setting up the security methods of your choice:

   • Okta Verify (recommended)
   • Google Authenticator
   • Security Key
   • Biometric Authenticator

From account settings

To add an additional security method after you are logged in to your Puget Sound account at login.pugetsound.edu, follow these instructions. 

1. Log in to your Okta dashboard at login.pugetsound.edu, click your name in the upper-right corner then click Settings.
   
2. Scroll down to the Security Methods section and click Set up or Set up another next to the security method of your choice.
   
3. You may be prompted to re-authenticate before making changes. 
4. Follow the instructions on setting up the security methods of your choice:
   • Okta Verify (recommended)
   • Google Authenticator
   • Security Key
   • Biometric Authenticator

Removing a security method

If you get a new phone or lose access to a security method, we recommend removing the security method and promptly setting up another method.

1. Log in to your Okta dashboard at login.pugetsound.edu, click your name in the upper-right corner then click Settings.
   
2. Scroll down to the Security Methods section and click Remove next to the security method you would like to remove.
   
3. You may be prompted to re-authenticate before the security method is successfully removed. 
4. We strongly recommend setting up another security method to ensure your account is protected by MFA:
   • Okta Verify (recommended)
   • Google Authenticator
   • Security Key
   • Biometric Authenticator