Okta Implementation FAQ

WVU Login accounts are created and managed in the Okta identity and access management platform. View WVU Login for more information about managing your Login account and changes coming this fall to multi-factor authentication.

What is Okta? 

Okta is a cloud-based identity management service through which WVU Login accounts are created and managed, providing secure access to WVU systems and services. Okta will eventually provide a true single sign-on experience and enhance security by granting permissions to applications based on your role(s) at the University.  

Okta is replacing a product called SailPoint. Gartner, a technology research and consulting company, has recognized Okta as an industry leader for Identity and Access Management. 

Why is WVU making this change? 

Okta will reduce costs, complexity, and the use of duplicative tools. This change will modernize WVU’s identity management, enhance security, and help position WVU for success with the upcoming Workday Business Modernization project and other Modernization Program initiatives.   

This change will also expand your options for multi-factor authentication, potentially allowing the use of biometric identifiers such as Windows Hello and Apple TouchID. ITS will announce if/when those options become available.   

When is this occurring? 

All existing WVU Login accounts moved to Okta on June 1, 2025.

In the second phase of the project, starting in summer 2025, access to various applications will begin moving to Okta. Notably, Google Workspace and Microsoft 365 will require an Okta account beginning July 30. Other services such as the WVU Portal, Zoom, MAP, Applaud, Banner, eCampus and SOLE will begin migrating to Okta later this summer.   

During this transition period, you may see either the old login screen or the new Okta interface when you access a WVU application. View the Okta Transition Timeline for more information.

Why does the system require me to use a non-WVU email address?

The Okta system requires a non-WVU email account for recovery purposes. If you are locked out of your WVU account, you can use the non-WVU email to get back in.

Password-expiration notices to your WVU account and your recovery account.

How will I change my password or make other changes to my account? 

When your password is close to expiring, you’ll get automated messages directing you to okta.wvu.edu, where you can manage your account. If you need to change your password ahead of schedule or make other changes to your account, just visit okta.wvu.edu and go to Settings.  

I have a Retiree email account (not Emeritus). What does this mean for me? 

Your account will continue to work the way it does now. 

I am a former student or alumnus. What does this mean for me? 

If you graduated within the last three years, your account should work the way it does now, but when it’s time to change your password you will change it in Okta. The password-expiration email will direct you to the right place. If you graduated more than three years ago, contact the ITS Service Desk at 304-293-4444 for account activation assistance.  

Will I still have to take a cybersecurity quiz when I change my password? 

No. All WVU system employees are now required to complete annual Cybersecurity Awareness Training, so there is no need for a duplicative quiz.  

Will I have to change my password more frequently? 

No, most people will continue to renew their passwords once a year. There are certain employees who must change theirs more frequently, either because it’s a security requirement for their job or because they didn’t complete WVU’s annual cybersecurity awareness training. 

I go by a Chosen Name, not my legal name. Will this still be possible? 

Yes, view Update Your Chosen Name for instructions, but please note that you will not see the words “Chosen Name” in your Personal Information settings. Applications that allow the use of Chosen Name will continue to receive that data; applications that continue to require legal names will not. 

I am a “shared user,” or someone who is employed by WVU Medicine but needs access to WVU systems. How am I affected? 

Shared Users must follow the instructions in the Okta activation email to activate their WVU Okta account. After completing the Okta activation email, go to wvumedicine.org/login and reset your WVUM password to resynchronize your WVU and WVUM passwords. After taking this initial step, in the future you will change your password with WVU Medicine, and that password will sync with WVU systems.  

How do I look up my username and WVUID number? 

Yes, but this feature will not be part of the new system. You will need to use a direct link, login.wvu.edu/self-service/lookup. View Look Up WVUID Number for instructions.

Why is Duo going away? 

Using Okta’s integrated multi-factor authentication app will save the University money and streamline the login experience. ITS will support Okta Verify, and faculty, staff and students are strongly encouraged to use this option.  

Will I still be able to visit login.wvu.edu to print one-time-use backup codes for Duo in case my phone is lost, stolen or out of battery life?  

No, this service does not exist in Okta.  

I use a Duo display token to log in. Will that still work? 

No, the Duo Digipass tokens that give you a code to complete your authentication will stop working Oct. 1. You can use the new hardware now if you like. View the Supported Multi-factor Tokens page for more information about the new devices.

Does the new hardware work the same way? 

No. Duo Digipass tokens generate a one-time numerical code to complete your authentication. Okta doesn’t support that method. The new hardware needs to be inserted into your computer or tapped if the device supports contactless authentication. 

How do I know if I’m affected by the Duo change? 

Everyone with WVU Login credentials on all campuses is affected by this change, including those with @hsc, @mix and @mail accounts. This includes faculty, staff, students, admitted students, WVU Foundation employees, Emeritus faculty and staff, non-Emeritus retirees and Sponsored Account users. 

I got a new phone, and I no longer have access to my old one. How do I add the new phone to my account if I can’t authenticate using the Okta Verify app? 

If you don’t have another device enrolled in Okta Verify, such as a tablet or a backup hardware token, you will need to call the ITS Service Desk at 304-293-4444 so we can verify your identity and restore your access.  

I’m not sure if I’ve activated my Okta account. How can I tell?

Sign into okta.wvu.edu with your WVU login credentials. If you can access the dashboard and see applications listed, you’re activated. If not, you’ll need to activate your account using these instructions.