DUO Two-Factor Set Up with OKTA / VITA - Cardinal


Introduction

This article aims to assist with setting up DUO Mobile Two-Factor Authentication with Cardinal / VITA

 

Please note: On Mac devices, Chrome is the only compatible browser.

 

For more information, see: https://www.hr.vt.edu/benefits/health-insurance/cardinal.html

Cardinal Multi-Factor Authentication Tips: https://www.hr.vt.edu/benefits/health-insurance/cardinal/cardinal-MFA-tips.html 

Cardinal Enterprise Resource Planning System: https://4help.vt.edu/sp?id=kb_article&sysparm_article=KB0016136

Instructions

Go to https://virginia.okta.com/

Enter Cardinal Username – the email address associated with your Cardinal account

 

STEP 1: Prepare Phone

 

Download and install the DUO Mobile 2-Factor Authentication app

 

Keep the app open and your phone nearby

 

 

STEP 2: Okta Dashboard

 

Username = full email address associated with Cardinal account

 

 

 

Enter Password and click Verify

STEP 3: Okta Account Settings

Click Settings

In drop down menu under username, top right corner

A new sign in window pops up

 

Enter username and password

 

Choose a passkey

 

 

Select Security Key

Enter YubiKey PIN

Sign In with Passkey

STEP 4: Set Up DUO Mobile

In Okta account, click Settings in drop down under user name, top right corner

Under Security Methods

Select Google Authenticator

 

With the DUO Mobile app open on phone

 

Click + / Add

 

Select QR code

Scan QR code

 

Once scanned account will appear as virginia.okta.com

Once user is signed in to OKTA, user must manually navigate to the Cardinal sign in - https://my.cardinal.virginia.gov/

If OKTA sign in was successful, the Cardinal homepage (post log in) should open: