Overview
Okta Multi-factor Authentication (MFA):
Okta is the single sign-on system used by Cabrillo to allow you to use Gmail, Self Service, and other applications, and keep your account information safe. After entering your username and password, you will need to verify with a separate method, called an authenticator:
- Phone - enter a code sent to you from a text message or phone call (using either your Cabrillo desk phone or your mobile phone)
- Okta Verify - approve sign-ins from a notification sent to your phone
- Google Authenticator - enter a code generated from an application on your phone
- YubiKey - a small USB device obtained from IT, which you plug into your computer to authenticate
Account settings and additional authenticators:
- Cabrillo IT highly recommends adding multiple authenticators. For example, if your mobile phone is damaged or lost, you could use your desk phone or YubiKey to access your Cabrillo account. If you don’t have access to any authenticators, then you won’t be able to sign in to your account.
- You can add and change authenticators, change your password, and view other account information in your Okta dashboard.
- From the dashboard, you can launch any of the Cabrillo web applications that you have access to.
- To edit your account information and add more authenticators:
- Go to your Okta dashboard at cabrillo.okta.com
- In the upper-right corner, click on your username and click Settings in the dropdown menu.
- You may be asked to re-enter your password.
- From here, you can change your password, security question, and add/remove/change authenticators.
FAQ
- I’m a new student - how do I set a password and get into my account for the first time?
- Which username and password should I use to sign in to Okta?
- Students: use your College ID number and password.
- Employees (Staff, Faculty, Short-term Employees, Student Assistants, and Volunteers): use your Network Account username (first two letters of your first name + first six letters of your last name) and password.
- What is my College ID number?
- Students: your student College ID number was included in the welcome letter you received after you applied to Cabrillo. If you have forgotten your ID number and cannot find the welcome letter, please contact the Welcome Center or email webreg@cabrillo.edu.
- Employees: your college ID number was included in your new hire paperwork and can be found by asking your supervisor.
- How often will I have to re-authenticate?
- Every twelve hours, Okta will require you to re-enter your login credentials. If you have Multi-factor authentication enabled (see below) you will also need to re-authenticate with one of your MFA authenticators.
- What should I do if I don’t have access to the personal email address in my user profile?
- If you’re able to log in to Cabrillo Self Service, you can change the email address in your profile. If you’re not able to login, and don’t have access to your personal email address, please contact the Welcome Center or email webreg@cabrillo.edu.
- Please wait at least an hour once any email address changes have been made before attempting to reset your password.
- How can I change/reset the password for my Cabrillo Network Account (for employees)?
- Am I required to use multi-factor authentication?
- Students are not required to use multi-factor authentication. It can be enabled optionally in your Okta dashboard.
- Student assistants are required to use multi-factor authentication on both their Network accounts and College ID accounts.
- Staff, Faculty, Contractors, Volunteers, and other employees are required to use Okta multi-factor authentication on both their Network accounts and College ID accounts.
- Click here for instructions on adding authenticators.
- What if I have only one authenticator and I can’t access it?
- If you do not have access to your only authenticator, you will not be able to log in. This is why it is important to set up multiple authentication methods. If your only authentication method is permanently unavailable, you will have to contact support from the resources below.
- I use my phone for authentication (SMS, Okta Verify, Google Authenticator) and I’m getting a new phone, what should I do?
- You will need to remove authenticators that rely on the old phone (Okta Verify and/or Google Authenticator) and set them up on the new phone. SMS verification will begin working with the new phone when your phone number is moved over.
- Where can I get technical support if I’m unable to reset my password or access my account?
YubiKey FAQ (Employees only):
- What is a YubiKey? Do I have to have one?
- A YubiKey is a hardware authentication device that provides secure access to your account. Using one is not mandatory; it is just one of the available options.
- Can someone else pick up a YubiKey for me or can it be mailed?
- No, you must pick up your YubiKey in person and provide legal identification at that time.
- Can I get more than one?
- No, it is cost-prohibitive to issue more than one YubiKey to a person.