Okta Implementation FAQ

As of June 1, 2025, WVU Login accounts are created and managed in the Okta identity and access management platform. View WVU Login for more information about managing your Login account and changes coming this fall to multi-factor authentication.

What is Okta? 

Okta is a cloud-based identity management service through which WVU Login accounts are created and managed, providing secure access to WVU systems and services. Okta will eventually provide a true single sign-on experience and enhance security by granting permissions to applications based on your role(s) at the University.  

Okta is replacing a product called SailPoint. Gartner, a technology research and consulting company, has recognized Okta as an industry leader for Identity and Access Management. 

Why is WVU making this change? 

Okta will reduce costs, complexity, and the use of duplicative tools. This change will modernize WVU’s identity management, enhance security, and help position WVU for success with the upcoming Workday Business Modernization project and other Modernization Program initiatives.   

This change will also expand your options for multi-factor authentication, potentially allowing the use of biometric identifiers such as Windows Hello and Apple TouchID. ITS will announce if/when those options become available.  

Who is affected? 

Everyone with WVU Login credentials on all campuses, including those with @hsc, @mix and @mail accounts, will begin using the Okta system in Summer 2025. This includes faculty, staff, students, admitted students, Research Corp. employees, WVU Foundation employees, Emeritus faculty and staff, non-Emeritus retirees, Sponsored Account users, and alumni and former students with active MIX accounts.  

Do I have to change my password as part of this change?  

Yes. When you activate your Login account in Okta, you will need to create a new password.  

Everyone with an active Login account should have received an email from Okta in both their primary WVU email account and at their personal recovery email address. If you don’t see the activation email in one account, check the other, along with your junk and spam folders. ITS and Okta started sending these instructions on June 1. If you have deleted or cannot find the activation instructions, please contact the ITS Service Desk at 304-293-4444.    

When is this occurring? 

All existing WVU Login accounts moved to Okta on June 1, 2025.

In the second phase of the project, starting in summer 2025, access to various applications will begin moving to Okta. Notably, Google Workspace and Microsoft 365 will require an Okta account beginning July 30. Other services such as the WVU Portal, Zoom, MAP, Applaud, Banner, eCampus and SOLE will begin migrating to Okta later this summer.   

During this transition period, you may see either the old login screen or the new Okta interface when you access a WVU application. View the Okta Transition Timeline for more information.

Why does the system require me to use a non-WVU email address?

The Okta system requires a non-WVU email account for recovery purposes. If you are locked out of your WVU account, you can use the non-WVU email to get back in.

Password-expiration notices to your WVU account and your recovery account.

How will I change my password or make other changes to my account? 

When your password is close to expiring, you’ll get automated messages directing you to okta.wvu.edu, where you can manage your account. If you need to change your password ahead of schedule or make other changes to your account, just visit okta.wvu.edu and go to Settings.  

I have a Retiree email account (not Emeritus). What does this mean for me? 

Your account should continue to work the way it does now. 

I am a former student or alumnus. What does this mean for me? 

If you graduated within the last three years, your account should work the way it does now except that when it’s time to change your password, you will do so in Okta. The password-expiration email will direct you to the right place.  If you graduated more than three years ago, contact the ITS Service Desk at 304-293-4444 for account activation assistance.  

Will I still have to take a cybersecurity quiz when I change my password? 

No. All WVU system employees are now required to complete annual Cybersecurity Awareness Training, so there is no need for a duplicative quiz.  

Will I have to change my password more frequently? 

No, most people will continue to renew their passwords once a year. There are certain employees who must change theirs more frequently, either because it’s a security requirement for their job or because they didn’t complete WVU’s annual cybersecurity awareness training. 

I go by a Chosen Name, not my legal name. Will this still be possible? 

Yes, you may also continue to use your Chosen Name by selecting the Edit function in Okta Settings. Applications that allow the use of Chosen Name will continue to receive that data; applications that continue to require legal names will not. View Update Your Chosen Name for more information.

Does this affect access to the Parent-Guest portal? 

No. Parent-Guest Portal access will work as it does now. View the WVU Parent/Guest Portal page for instructions.

I am a “shared user,” or someone who is employed by WVU Medicine but needs access to WVU systems. How am I affected? 

Shared Users must follow the instructions in the Okta activation email to activate their WVU Okta account. After completing the Okta activation email, go to wvumedicine.org/login and reset your WVUM password to resynchronize your WVU and WVUM passwords. After taking this initial step, in the future you will change your password with WVU Medicine, and that password will sync with WVU systems.  

Will I still be able to look up my username and WVUID number? 

Yes, but this feature will not be part of the new system. You will need to use a direct link, login.wvu.edu/self-service/lookup. View Look Up WVUID Number for instructions.

Do we still have to use Duo?  

For now. Duo two-factor authentication will remain in place until approximately Oct.1, 2025, and you will still need it to access many WVU applications.  

Duo Mobile will be retired on Oct. 1 and replaced with Okta’s integrated multi-factor authentication app, Okta Verify. Hardware alternatives for those who can’t or don’t want to use the app will be available.  

Why is Duo going away? 

Using Okta’s integrated multi-factor authentication app will save the University money and streamline the login experience. ITS will support Okta Verify, and faculty, staff and students are strongly encouraged to use this option.  

Do we still have to use Duo after WVU Login accounts move to Okta on June 1?   

Yes. Duo two-factor authentication will remain necessary to access many WVU applications until approximately Oct. 1, 2025.  At that time, you will need to replace the Duo Mobile app with Okta’s integrated multi-factor authentication app, Okta Verify. Hardware alternatives for those who can’t or don’t want to use the app will be available.  

Will I still be able to visit login.wvu.edu to print one-time-use backup codes for Duo in case my phone is lost, stolen or out of battery life?  

No, this service does not exist in Okta.  

I use a Duo display token to log in. Will that still work? 

No, the Duo Digipass tokens that give you a code to complete your authentication will stop working Oct. 1. You can use the new hardware now if you like. View the Supported Multi-factor Tokens page for more information about the new devices.

Does the new hardware work the same way? 

No. Duo Digipass tokens generate a one-time numerical code to complete your authentication. Okta doesn’t support that method. The new hardware needs to be inserted into your computer or tapped if the device supports contactless authentication. 

How do I know if I’m affected by the Duo change? 

Everyone with WVU Login credentials on all campuses is affected by this change, including those with @hsc, @mix and @mail accounts. This includes faculty, staff, students, admitted students, Research Corp. employees, WVU Foundation employees, Emeritus faculty and staff, non-Emeritus retirees and Sponsored Account users. 

When should I download the Okta Verify App?  

ITS will announce when the Okta Verify App is available for download.