Interested in videos? Check out our MiVideo page! Training, tips and tricks, and more!

Okta

Okta is a cloud-based identity and access (and login) platform - that will replace Duo at the University. Okta went live on February 25, 2026 - for services that used the U-M Authentication Screen only.

These things changed on 2/25/26:

The current Weblogin screen was replaced by an Okta sign-in screen.
Okta Verify replaced Duo for multi-factor authentication (MFA) for those applications that use the official weblogin screen

Key Okta Features:

Single Sign-On (SSO): Provides a simplified login experience by allowing users to access multiple applications with a single set of credentials.
Multi-Factor Authentication (MFA): Enhances security by requiring additional verification steps beyond just a password, such as a push notification or verification code.
Lifecycle Management: Automates user account creation, updates, and deactivation across integrated applications.
Adaptive Security: Implements policies that adjust security measures based on user behavior and context.

FAQ's:

Do I have to use fingerprints or face recognition (biometrics)? No, they will not be mandatory. Available, but not mandatory.
Can I still use a hardware token? Yes, but you will need to get a new one that works (is compatible) with Okta.
Will this affect Sponsored Accounts or Friend Accounts? Eventually, in phase two of the project, sponsored accounts (including sponsored individuals, short-term guests, visiting scholars, etc.) will get a new experience. Friend accounts will move to Okta, with the rest of campus, and there will be a short setup that will be required for these accounts.
What applications that use SSO will be affected? All of them. All systems that are configured to use SSO (Single Sign On) will have to be updated to use Okta SSO. The timing for these changes is still in development, and there should not be any action for application owners before December 2025.