Introduction
Q:  What is Cardinal? 
A: https://www.cardinalproject.virginia.gov/about Cardinal is Virginia's Enterprise Resource Planning (ERP) system, powered by Oracle's PeopleSoft. This web-based solution centralizes key administrative functions including human resources, payroll, health benefits, timekeeping, and financial management. As a comprehensive ERP solution, Cardinal integrates these processes for efficient administrative management and serves as the Commonwealth's official system of record.
Q: Where do I get help with the Cardinal app?
A: Cardinal is an application supported by VITA, https://www.vita.virginia.gov/, for the State of Virginia. The Cardinal Team provides technical support during business hours; 8:00 a.m. - 5:00 p.m. Monday - Friday, excluding state holidays. For assistance:
- Submit a Request for Support to Cardinal
- Email vccc@vita.virginia.gov  and include the following information:
- Subject: Cardinal – <brief summary for routing>
- Email Content: Detailed information about your issue (i.e., functional area, page, actions, error)
- Name, email address, and best contact phone number
 
Instructions
Action Required: Update Your Multi-Factor Authentication Method
If you currently use SMS (text message) or phone call for multi-factor authentication (MFA) to log in to Cardinal, please be aware these login methods will be permanently removed later this year. After this change, you will no longer be able to log in to Cardinal by receiving a one-time code via text or phone call.
The Virginia IT Agency (VITA) is retiring these methods due to security risks. To better protect the Commonwealth’s systems and your data, VITA is moving to phishing-resistant authentication methods offered through Okta.
What You Need to Do
If you currently use SMS or phone call for MFA, you must set up a new MFA method as soon as possible. VITA recommends completing setup before November 30 to avoid any disruption in access.
Recommended Option: Okta Verify Mobile Application
The preferred MFA method is the Okta Verify mobile app, available for free on Apple and Android devices. It supports authentication via:
- Push notifications
- One-time passcodes
Here is a site to view step-by-step setup instructions on the Cardinal website.
4Help agents should attempt to walk users through the following instructions: https://cardinalproject.virginia.gov/oktaverify
We understand this will be best effort, but Cardinal/VITA may be slow to respond. Unfortunately, the email implied (incorrectly) that this needed to be done today. Users actually have until the end of November.
Questions we CAN answer:
- Is this email legitimate? Yes, it is from the State of Virginia and the Cardinal system, used to make changes to health insurance and flexible reimbursement.
- Should I install the app? Yes, if you want to continue to use the Cardinal system for enrollment and changes.
- When are these changes in effect? November 30, your current authentication methods will continue to work until that date.
- What is changing? If you currently use SMS (text message) or phone call for multi-factor authentication (MFA) to log in to Cardinal, please be aware these login methods will be permanently removed later this year. After this change, you will no longer be able to log in to Cardinal by receiving a one-time code via text or phone call. The Virginia IT Agency (VITA) is retiring these methods due to security risks. To better protect the Commonwealth’s systems and your data, VITA is moving to phishing-resistant authentication methods offered through Okta.
Questions we CANNOT answer:
- What do I do if I don’t want to install Okta on my personal phone? What are my options?
- I’m not able to install the Okta application.
- I’ve tried the instructions and step X doesn’t work for me.
Already Using an Authenticator App?
If you are using Google Authenticator or Microsoft Authenticator, you can continue to do so for now. However, please note that VITA may phase out these options in the future. We strongly recommend switching to Okta Verify for the best long-term support and security.
Completing this update before November 30 ensures you maintain uninterrupted access to Cardinal.
Questions
If you have technical or functional questions, submit a help desk ticket by emailing:
and include the following information:
Subject: Cardinal – <brief summary for routing>
Email Content:
- 
- Detailed information about your issue (i.e., functional area, page, actions, error)
- Name, email address, and best contact phone number