IT News & Updates – Okta Identity Security

What is Okta?

Okta is an identity management software company. Their identity security package that WSU is now migrating to adds multiple levels of personal security that the previous authentication system lacked.

How is this being rolled out to the WSU community?

WSU has just started the migration process. It started on March 4th and is scheduled to be complete by May 6th. The process began with an email last week from ITS informing you that is was happening and to expect emails. Each week beginning March 4th, a group of users will receive two additional emails. The first has the subject line, “Confirming your Okta invitation is valid.” This email explains the steps to be taken and explains that unlike normal ITS emails, this does include live links and that the subsequent emails from Okta will also have live links. A screenshot of this email is shown below. The next email is from WSU Okta with the subject line, “Welcome to WSU Okta” and contains a blue button with the words “Activate Okta Account.” Once you click on this button you will be taken to an account password reset page. You must enter a new password that will become your WSU system password. It will also have you set up a new security question and select a security image. You may also opt to set a phone number for text or voice verification. Once you complete this step, you will be taken to your end user setting page. This is the page you would see if/when you need to reset at a later date using the account.wsu.edu address. CAHNRS IT came up with a set-by-step guide to help walk you through the process. You can access their guide here:  https://it.cahnrs.wsu.edu/documents/2019/03/okta-setup.pdf/. (You probably got an email from Bill Bonner with this link.)

How long do have to respond to the activation email?

The WSU Okta password reset email is good for 7 days. If for some reason you can’t use it by then, clicking on the button will take you to a page for requesting a new invitation email. I went through this procedure this morning. Outlook did ask me to re-enter my password. The first attempt said there was an error requiring me to contact the administrator. But then a new login window opened allowing me to try again. This time it worked. So, if your first attempt fails, try again!

I just reset my WSU password. Do I still have to do this?

Yes. Unfortunately, if you recently reset your password, even the same morning before receiving the Activation email, you will need to reset again.

How will this affect my email and myWSU account?

Since Okta will have you reset your NetID password, you will need to start using this new password with all your WSU  internet activities including your WSU email, myWSU, and any other WSU systems you normally access (such as AIS Apps).

What’s with the “security image”?

When you reset your password for the first time using the Okta activation window, it will ask you to select an image from one of several shown. Later on, when you log in to your account from an Okta email or directly from accounts.wsu.edu you will see the image you selected. This is to help assure you that you are at the correct webpage and not at a fraudulent one, i.e., will have a recognizable image. You can change the image at any time at accounts.wsu.edu.

What do I do if I have problems with the link or my account?

As mentioned above, my first attempt to log back into Outlook failed. But the second time worked. I also encountered the same issue when accessing shared mailboxes and some online WSU Apps. It was frustrating, but repeating the login eventually worked. Rember that your browser cache likely has your older password stored and wants to use that. So, you need to actually type in the new password instead of letting it autofill, then let it save the updated password – if you are comfortable with your computer storing this information. Also, not all campus systems are tightly connected, this means that just because you logged in successfully the first time to something like your WordPress site, doesn’t mean that logging into HR the first time after the update won’t make you try again. But once you have successful reconnected, you shouldn’t have to go through it again.
But with any major software change, there are bound to be a few unforeseen glitches. If you do have problems not solved by re-entering your password, you can get help from the crimsonservicedesk@wsu.edu. if you can’t access your email, here’s their phone number: 509-335-4357 (or 54357 from your desk phone). You can also try to contact cit.support@wsu.edu or visit their help request portal https://support.it.cahnrs.wsu.edu/portal if you have questions or problems.

Background information

For additional information and background about the Okta migration project please see my previous article on that topic here.