SSO Multi-Factor Authentication (MFA)
Applications Requiring MFA Beginning October 29, 2020
- Office 365 including Outlook, Teams, and more.
How-to Resources
FAQs for Changing to Outlook Email
- Outlook – Android and Apple Native Mail Apps Comparison
- Remove Calendar in Outlook for Mac
- Merge or Combine Calendars in the Outlook App
- Manage Notifications in Outlook App
- Email – How to Add or Remove your WSU Email Account on the Outlook App for Android
- Email – How to Add or Remove your WSU Email Account on the Outlook App for iOS (iPhone, iPad)
Although the verification codes are technically public records, they likely would be considered transient and therefore could be deleted by the employee after use. If there was a records request for the codes, the employee would be asked to provide any codes that still existed on their phone. Under current case law, if the completeness of the employee’s response to the request were challenged, the employee could be asked to provide an affidavit. Seizure of a phone is highly unlikely.
Multi-Factor Authentication (MFA) for myWSU
Close to 50,000 users per month are now successfully using the new Okta SSO system for many WSU websites and software applications.
Preparing for MFA in Your Area: MFA Options
Users have five options available for MFA. Users should ideally select two of the following options. One option is required, but a second option can serve as a backup resource:
- Okta Verify Mobile App – Sends a push notification, or provides a unique code every 30 seconds, to approve authentication.
- Google Authenticator Mobile App – Generates a unique code every 30 seconds.
- SMS – Text message with a unique code is sent to the user’s phone number.
- Voice call – An automated message delivers a unique code to the user’s phone number (can be a home, mobile, or desk number).
- USB Security Key – Device (similar to a flash drive) that inserts into the computer’s USB port.
Implementation Timeline for WSU Applications
- MyWSU will be the first WSU application requiring MFA, beginning December 19, 2019, offering access for 24 hours each time you use MFA to access the application. Completed!
- Other WSU applications already using the new SSO system will require MFA beginning August, 2020. Completed!
- Workday, WSU’s new system for finance, human resources, payroll, and grants management, will utilize MFA when it launches in January of 2021.
Support Contacts
Contact ITS
Send General Requests to crimsonservicedesk@wsu.edu
Pullman
Website – crimsonservicedesk.wsu.edu
Email – crimsonservicedesk@wsu.edu
Phone – 509-335-4357
Vancouver
Email – van.evita@wsu.edu
Phone – 360-546-9770
Spokane
Email – spok.it.help@wsu.edu
Phone – 509-358-7748
Tri-Cities
Email – tricities.tchelp@wsu.edu
Phone – 509-372-7334
Everett
Email – everett.it@wsu.edu
Phone – 425-405-1555
Okta Single Sign-On (SSO) FAQs
What is Okta, SSO, and MFA?
You may hear different terminology when discussing how to access WSU’s network resources. To clarify the differences:
Okta is the name of the vendor who supplies WSU’s current SSO login process and Multi-Factor Authentication (MFA) service.
SSO is an acronym for Single Sign-On, which is the name for the log in process that allows WSU users to access most university websites and software applications with a single set of login credentials.
MFA (sometimes referred to as two-factor authentication or extra verification) is WSU’s added security authentication step that requires a user to enter their Network ID (NID) and password, followed by a verifying a code through one of the following options:
- Authentication app on a mobile device (Okta Verify or Google Authenticator)
- Voice call
- USB Key
- Text message (SMS)
Users who need to access WSU resources will receive an invitation to set up their WSU Okta account for their NID or Friend ID (FID) and password, as well as MFA preferences, on account.wsu.edu.
- Users will receive reminders to reset their password every six months.
- For assistance creating an Okta-compliant password, search ‘password generator’ in Google and you will find a number of online websites ready to help.
- Already have your WSU password, but need to visit the WSU password management site? Visit account.wsu.edu anytime.
- Sample OKTA SSO Account Activation Email
- WSU SSO – How to Unlock Account
WSU Apps Using Okta Security |
---|
ad.wsu.edu |
Adobe Creative Cloud |
Amazon Web Services |
Amazon Web Services SPO |
AOI ALN |
AOI Apps |
AOI eLearning |
AOI oidc-test |
ASIS - Umbraco - SA CMS Dev |
ASIS-Siteimprove |
ASIS-SSO_Dev |
ASIS-SSO_Prod |
Blackboard Learn |
Blackboard Stage |
Budget Planning System |
CAHNRS Authenticate OAuth |
CampusM |
Canvas |
Canvas - TEST |
CCB EduSourced |
CCB Suitable |
Cloudways |
COE AWS AppStream |
Comevo Online Orientation |
CVM eSuggestion Box |
CVM eSuggestion Box - Test |
CVM Group Manager |
CVM Preceptors |
CVM TRC |
CVM Veterinary Teaching Hospital Community Practice Calendar |
CVM Veterinary Teaching Hospital Computer Survey/Audit |
CVM Veterinary Teaching Hospital Faxing Center |
CVM Veterinary Teaching Hospital Item Database |
CVM Veterinary Teaching Hospital Medical Record Tracking |
CVM Veterinary Teaching Hospital Patient Safety Report |
CVM Veterinary Teaching Hospital Scrub Tracking |
CVM VTH Online Payments |
DocuSign |
E.Flo Colleagues |
E.Flo Colleagues Dev |
EIT TWILIO FLEX |
ESFCOM Admissions |
ESG Github |
ESG IBM Cloud |
ESG Jenkins |
EYP LMS |
FAIS - AIMS Test |
FAIS Signage TEST |
Flex Cougar Connector |
FLEX Helpdesk |
FLEX SFS |
FLEX Vancouver |
G Suite |
iGrad |
iGrad Test |
Inteum |
Inteum DEV |
ITS Global Protect Test VPN |
ITS-Forms |
ITS-FormsSSO |
Juristat |
Legacy Apps |
Meraki CIT Test Lab SAML |
Meraki Everett SAML |
Meraki Extension Network |
Meraki FullAdmin TEST |
MFA Test |
MyWSU |
NanoVest |
Oracle Cloud Infrastructure |
PnC - Web Portal |
ResLife - Qualtrics 360 |
Salesforce-OC |
Settings |
Shibboleth SP |
Slate Enrollment CRM |
Slate Test |
SplunkES |
TC FreePBX |
TC PaperCut |
TC Persona Campus SAML |
Title IX Training |
UREC-Attic-Dev |
VAN Apporto |
VAN ENCS AutoLab |
VAN ENCS AutoLab-Dev |
WADDL Portal Admin |
WADDL Portal Admin Test |
webSSO |
Zoom |
ZoomRoom Web App |
Adobe Creative Cloud | ESG Jenkins |
Amazon Web Services | EYP LMS |
AOI ALN | ITS Global Protect Test VPN |
AOI Apps | Legacy Apps (Mainframe, WSU Notices) |
AOI eLearning | MFA Test |
ASIS-SSO | MyWSU |
Blackboard Learn | Oracle Cloud Infrastructure |
Budget Planning System | ResLife - Qualtrics 360 |
CAHNRS Authenticate | Settings |
CampusM | Slate Enrollment CRM |
Canvas | TC FreePBX |
CCB EduSourced | TC PaperCut |
CCB Suitable | TC Persona Campus SAML |
CVM eSuggestion Box | Title IX Training |
CVM Preceptors | UREC-Attic-Dev |
CVM Veterinary Teaching Hospital Community Practice Calendar | VAN ENCS AutoLab-Dev |
CVM Veterinary Teaching Hospital Faxing Center | WADDL Portal Admin |
CVM Veterinary Teaching Hospital Item Database | webSSO (Ucomm) |
CVM Veterinary Teaching Hospital Medical Record Tracking | Zoom |
CVM Veterinary Teaching Hospital Patient Safety Report | |
EIT TWILIO FLEX | |
ESFCOM Admissions | |
ESG Github | |
ESG IBM Cloud |
More than 45,000 users per month are now successfully using the new Okta Single-Sign-On (SSO) system for many WSU network applications. With phase one complete, the project team continues to prepare for a December implementation of multi-factor authentication (MFA) for myWSU.
This second phase brings a greater need for partnership and collaboration as WSU areas determine which MFA tools to utilize along with other necessary decisions regarding policy, implementation, and long-term program management.
Preparing for MFA in Your Area: MFA Options
In preparation for MFA implementation, ITS asks you and your area staff to think through your organization’s needs and identify best solutions based on the options listed below. ITS particularly needs your assistance in thinking about all business cases specific to your area that may require unique solutions.
Users will have five options for MFA. Users should select two of the following options, one is required, and a second one serves as a backup resource:
- Okta Verify Mobile App – two options include a code that changes every 60 seconds, or a Push method, to approve authentication
- Google Authenticator Mobile App – a new code generates every 60 seconds
- SMS – a texted code will be sent to the user’s configured mobile device
- Voice call – an automated message providing a 5-digit code will be delivered to the user’s configured telephone (home, mobile, or desk)
- U2F Security Key – this device, similar to a flash drive, inserts into USB port
Implementation Timeline for WSU Applications
- MyWSU will be the first WSU application requiring MFA, beginning December 19, 2019, offering access for 24 hours each time you use MFA to access the application.
- Other WSU applications already using the new SSO system will have the opportunity to add MFA beginning March 19, 2020.
- Workday, WSU’s new system for finance, human resources, payroll, and grants management, will utilize MFA when it launches in July of 2020.
Okta SSO FAQs
What is Okta SSO?
Okta SSO is the Single sign on (SSO) resource for WSU.
- Users will receive reminders to reset their SSO password every 6 months
- For assistance creating an Okta-compliant password, google ‘password generator’ and find a number of online sites ready to help.
- Already have your Okta password, but need to get back to Okta password management site? Visit account.wsu.edu anytime.
Departments Requesting Okta Single Sign On Functionality
Departments who wish to request Okta SSO for their applications should contact ITS. Please submit a request through the self-help portal at crimsonservicedesk.wsu.edu with your name, phone number, application name, and application description. After submitting your service desk ticket, a member of ITS will reach out to you with more information and instructions on how to begin testing for on-boarding your application(s).
Current List of Applications Now Using Okta Single Sign On
Adobe Creative Cloud | ESG Jenkins |
Amazon Web Services | EYP LMS |
AOI ALN | ITS Global Protect Test VPN |
AOI Apps | Legacy Apps (Mainframe, WSU Notices) |
AOI eLearning | MFA Test |
ASIS-SSO | MyWSU |
Blackboard Learn | Oracle Cloud Infrastructure |
Budget Planning System | ResLife - Qualtrics 360 |
CAHNRS Authenticate | Settings |
CampusM | Slate Enrollment CRM |
Canvas | TC FreePBX |
CCB EduSourced | TC PaperCut |
CCB Suitable | TC Persona Campus SAML |
CVM eSuggestion Box | Title IX Training |
CVM Preceptors | UREC-Attic-Dev |
CVM Veterinary Teaching Hospital Community Practice Calendar | VAN ENCS AutoLab-Dev |
CVM Veterinary Teaching Hospital Faxing Center | WADDL Portal Admin |
CVM Veterinary Teaching Hospital Item Database | webSSO (Ucomm) |
CVM Veterinary Teaching Hospital Medical Record Tracking | Zoom |
CVM Veterinary Teaching Hospital Patient Safety Report | |
EIT TWILIO FLEX | |
ESFCOM Admissions | |
ESG Github | |
ESG IBM Cloud |
Information Technology Services
Contact
Send General Requests to crimsonservicedesk@wsu.edu
MFA Self-Help
Set up
Smartphone Applications
MFA Authentication
Troubleshooting
Fraudulent Reports
MFA Recovery
U2F Key Options
OKTA SSO Self-Help
Sample Activation
Unlocking Account
How-to Resources
FAQs for Changing to Outlook Email
- Outlook – Android and Apple Native Mail Apps Comparison
- Remove Calendar in Outlook for Mac
- Merge or Combine Calendars in the Outlook App
- Manage Notifications in Outlook App
- Email – How to Add or Remove your WSU Email Account on the Outlook App for Android
- Email – How to Add or Remove your WSU Email Account on the Outlook App for iOS (iPhone, iPad)
Although the verification codes are technically public records, they likely would be considered transient and therefore could be deleted by the employee after use. If there was a records request for the codes, the employee would be asked to provide any codes that still existed on their phone. Under current case law, if the completeness of the employee’s response to the request were challenged, the employee could be asked to provide an affidavit. Seizure of a phone is highly unlikely.
Multi-Factor Authentication (MFA) for myWSU
Close to 50,000 users per month are now successfully using the new Okta Single-Sign-On (SSO) system for many WSU network applications.
Preparing for MFA in Your Area: MFA Options
Users have five options available when setting up MFA. Users should ideally select two of the following options, one is required, and a second one serves as a backup resource:
- Okta Verify Mobile App – two options include a code that changes every 30 seconds, or a Push method, to approve authentication
- Google Authenticator Mobile App – a new code generates every 30 seconds
- SMS – a texted code will be sent to the user’s configured mobile device
- Voice call – an automated message providing a 5-digit code will be delivered to the user’s configured telephone (home, mobile, or desk)
- USB Security Key – this device, similar to a flash drive, inserts into USB port
Implementation Timeline for WSU Applications
- MyWSU will be the first WSU application requiring MFA, beginning December 19, 2019, offering access for 24 hours each time you use MFA to access the application. Completed!
- Other WSU applications already using the new SSO system will require MFA beginning August, 2020. Completed!
- Workday, WSU’s new system for finance, human resources, payroll, and grants management, will utilize MFA when it launches in January of 2021.
Support Contacts
Contact ITS
Send General requests to crimsonservicedesk@wsu.edu
Pullman
Website – crimsonservicedesk.wsu.edu
Email – crimsonservicedesk@wsu.edu
Phone – 509-335-4357
Vancouver
Email – van.evita@wsu.edu
Phone – 360-546-9770
Spokane
Email – spok.it.help@wsu.edu
Phone – 509-358-7748
Tri-Cities
Email – tricities.tchelp@wsu.edu
Phone – 509-372-7334
Everett
Email – everett.it@wsu.edu
Phone – 425-405-1555
Okta Single Sign On (SSO) FAQs
What is Okta, SSO, and MFA?
You may hear different terminology when discussing how to access WSU’s network resources. To clarify the differences:
Okta is the name of the vendor who supplies WSU’s current SSO login process and MFA (Multi-Factor Authentication) service.
SSO is an acronym for “single sign on,” which is the name for the authentication or log in process that allows WSU users to access most university software applications with a single set of login credentials.
MFA or Multi-Factor Authentication (sometimes referred to as “two-factor” or “extra verification”) is WSU’s added security authentication step that requires a user to enter their network ID (NID) and password, followed by a code received through one of the following options:
- Authentication app on a mobile device (Okta Verify or Google Authenticator)
- Voice call
- USB Key
- Text message (SMS)
Users who need to access WSU resources will receive an invitation to set up their WSU NID (network ID) or friend ID (FID) and password, as well as MFA preferences, at account.wsu.edu.
- Users will receive reminders to reset their account password every 6 months
- For assistance creating an Okta-compliant password, google ‘password generator’ and find a number of online sites ready to help.
- Already have your WSU password, but need to visit the WSU password management site? Visit account.wsu.edu anytime.
- Sample OKTA SSO Account Activation Email
- WSU SSO – How to Unlock Account
Departments Requesting WSU Single Sign On Functionality
Departments who wish to request WSU SSO for their applications should contact ITS. Please submit a request through the self-help portal at crimsonservicedesk.wsu.edu with your name, phone number, application name, and application description. After submitting your service desk ticket, a member of ITS will reach out to you with more information and instructions on how to begin testing for on-boarding your application(s).
Current List of Applications Now Using MFA
There are approximately ninety applications currently using Okta that require MFA. Please reach out to your department’s system administrators or technical support staff for information on your local applications. The list of top university-wide applications can be found below.
Top Applications Currently Requiring MFA:
- Office 365
- myWSU
- Adobe Creative Cloud
- Zoom video conferencing
- Canvas
- Blackboard
- WSU Mobile
- Matlab
- eXplorance Blue
—and more.
WSU Apps Using Okta Security |
---|
ad.wsu.edu |
Adobe Creative Cloud |
Amazon Web Services |
Amazon Web Services SPO |
AOI ALN |
AOI Apps |
AOI eLearning |
AOI oidc-test |
ASIS - Umbraco - SA CMS Dev |
ASIS-Siteimprove |
ASIS-SSO_Dev |
ASIS-SSO_Prod |
Blackboard Learn |
Blackboard Stage |
Budget Planning System |
CAHNRS Authenticate OAuth |
CampusM |
Canvas |
Canvas - TEST |
CCB EduSourced |
CCB Suitable |
Cloudways |
COE AWS AppStream |
Comevo Online Orientation |
CVM eSuggestion Box |
CVM eSuggestion Box - Test |
CVM Group Manager |
CVM Preceptors |
CVM TRC |
CVM Veterinary Teaching Hospital Community Practice Calendar |
CVM Veterinary Teaching Hospital Computer Survey/Audit |
CVM Veterinary Teaching Hospital Faxing Center |
CVM Veterinary Teaching Hospital Item Database |
CVM Veterinary Teaching Hospital Medical Record Tracking |
CVM Veterinary Teaching Hospital Patient Safety Report |
CVM Veterinary Teaching Hospital Scrub Tracking |
CVM VTH Online Payments |
DocuSign |
E.Flo Colleagues |
E.Flo Colleagues Dev |
EIT TWILIO FLEX |
ESFCOM Admissions |
ESG Github |
ESG IBM Cloud |
ESG Jenkins |
EYP LMS |
FAIS - AIMS Test |
FAIS Signage TEST |
Flex Cougar Connector |
FLEX Helpdesk |
FLEX SFS |
FLEX Vancouver |
G Suite |
iGrad |
iGrad Test |
Inteum |
Inteum DEV |
ITS Global Protect Test VPN |
ITS-Forms |
ITS-FormsSSO |
Juristat |
Legacy Apps |
Meraki CIT Test Lab SAML |
Meraki Everett SAML |
Meraki Extension Network |
Meraki FullAdmin TEST |
MFA Test |
MyWSU |
NanoVest |
Oracle Cloud Infrastructure |
PnC - Web Portal |
ResLife - Qualtrics 360 |
Salesforce-OC |
Settings |
Shibboleth SP |
Slate Enrollment CRM |
Slate Test |
SplunkES |
TC FreePBX |
TC PaperCut |
TC Persona Campus SAML |
Title IX Training |
UREC-Attic-Dev |
VAN Apporto |
VAN ENCS AutoLab |
VAN ENCS AutoLab-Dev |
WADDL Portal Admin |
WADDL Portal Admin Test |
webSSO |
Zoom |
ZoomRoom Web App |
Adobe Creative Cloud | ESG Jenkins |
Amazon Web Services | EYP LMS |
AOI ALN | ITS Global Protect Test VPN |
AOI Apps | Legacy Apps (Mainframe, WSU Notices) |
AOI eLearning | MFA Test |
ASIS-SSO | MyWSU |
Blackboard Learn | Oracle Cloud Infrastructure |
Budget Planning System | ResLife - Qualtrics 360 |
CAHNRS Authenticate | Settings |
CampusM | Slate Enrollment CRM |
Canvas | TC FreePBX |
CCB EduSourced | TC PaperCut |
CCB Suitable | TC Persona Campus SAML |
CVM eSuggestion Box | Title IX Training |
CVM Preceptors | UREC-Attic-Dev |
CVM Veterinary Teaching Hospital Community Practice Calendar | VAN ENCS AutoLab-Dev |
CVM Veterinary Teaching Hospital Faxing Center | WADDL Portal Admin |
CVM Veterinary Teaching Hospital Item Database | webSSO (Ucomm) |
CVM Veterinary Teaching Hospital Medical Record Tracking | Zoom |
CVM Veterinary Teaching Hospital Patient Safety Report | |
EIT TWILIO FLEX | |
ESFCOM Admissions | |
ESG Github | |
ESG IBM Cloud |