Okta FAQs Okta Frequently asked questions Do I need Okta Verify on a device in my possession? Yes, you will need to use Okta Verify regularly as a second factor to verify it is you. It's important to have Okta Verify on a device you have with you when accessing SPPS application, including Microsoft Office 365, and all Google apps. Is Okta Verify a SPPS specific application? Can I use it for personal MFA? Okta can be used on a personal phone as an authentication app for personal accounts. Okta Verify is an authentication application that has been available for personal use for many years. If you install Okta Verify on a personal phone even if you leave SPPS you can still use it to sign in to personal accounts and SPPS cannot see or control those accounts. How Often will I need to sign in and verify? Verification will depend on multiple things. If signing in from school it will be less often. When Okta detects a change in location it will ask you to verify your identity. If you login from a location that is more risky, such as a coffee shop or free public WiFi, it will ask you to verify every time. I am currently using a different authenticator (Google or Microsoft), do I need to switch? Unfortunately Microsoft authenticator does not work with Okta so anyone currently using it will need to switch. Google Authenticator is still being review and not available at this time so users will need to switch to Okta Verify. Can I install Okta Verify on my personal computer? Yes you may install Okta Verify on your personal Mac or PC. For MacBooks the application is available in the Apple App Store free of cost. For PC you can download the latest version from the following link Okta Verify for PC Do I need to have multiple authenticators (MacBook, iPad, phone)?You only need one authenticator to gain access, however, if there are any issues with that device you will not be able to access SPPS resources without assistance from Technology Services. Therefore, we highly recommend having more than one authenticator setup. It is important to have backup options should you should you forget your device at home, or if the battery dies. Think of Okta like your school badge, without it you cannot get in. You will need to have an authenticator anytime you are accessing email and other SPPS applications. I'm trying to add Okta to another device but it's asking to scan a QR code or enter an 8 digit code? If you are adding Okta to a second (or third) device you will need to be at the device you currently have Okta Verify setup on. The directions for adding more devices is here Setup a secondary device in Okta (QR code or 8 digit code) How do biometrics work? When a MacBook, cell phone, iPad, or Windows laptop sets up biometrics it does not send that information anywhere. The scanner creates a mathematical algorithm based on your fingerprint and stores that algorithm in the TPM chip on a Windows device or in your local keychain for Apple devices. Your fingerprint cannot be recreated using the algorithm. If your keychain is broken this will also break the ability to use your fingerprint. This information never leaves the device and is not accessible to SPPS, Apple, or Microsoft. What if I don't want to use Biometrics? Biometrics are by far the most secure way to secure your account and prevent someone else from logging in as you. Passwords can be guessed, social engineered to narrow password options, or brute forced using computers to try endless combinations. Currently some devices will allow a user to skip setting up biometrics but it makes authentication much more difficult requiring a user to enter their password several times. You may request a YubiKey to use for authentication but that comes with certain challenges. The YubiKey would be the best option for those that refuse to use biometrics. We are looking for other options for users that do not require biometrics. If other options become available we will update this article. Why do we need MFA? Every day our data security team is reseting passwords for users that had their email password compromised. MFA helps protect our accounts from hackers. In the past few years school districts have become a large target for hackers. Over 100 schools have been hacked in the past few years costing each school millions of dollars. The average data breach costs 4.5 million dollars, and a single cyber event can cost a district anywhere from $50,000 to over 10 million.