Okta - Multi-Factor Authentication

Purpose: Use this document to understand how to change your multi-factor authentication (MFA) recovery options available through your ctcLink account and how to update them.

Audience: College Faculty, Staff and Students.

If you experience any issues with sign on credentials, user names, passwords or student ID numbers, please contact your college Help Desk and/or college Advisor.

Note: Ensure that pop-up blockers are disabled in your browser.

Log in to ctcLink with Multi-Factor Authentication

  1. Navigate to the ctcLink Sign In page (https://gateway.ctclink.us).
  2. Enter your ctcLink ID into the ctcLink ID field.
  3. Enter your password into the Password field.
  4. Select the Sign in button.

NOTE: If you check the "Keep me signed in" box at login and you use the same browser you may not be asked to multi-factor authenticate again for another 16 hours. You will need to do the same when logging into Canvas (if you use your EMPLID to login).

Screen shot of login page with ctcLink ID, password, and Keep me signed in box
  1. A "Verify it's you with a security method" pop-up message appears.
  2. Select a recovery method from the available options:
    1. Google Authenticator
    2. Okta Verify
    3. Phone
    4. Security Key/Biometric Authenticator
  3. Select at least one security method before continuing. You may choose additional security methods if desired.
Google Authenticator, Okta Verify, Phone or Security Key/Biometric Authenticator security method options.
  1. Complete the setup process for each security method you selected. At least one security method is required.

NOTE: For enhanced account security, consider setting up Google Authenticator, Okta Verify, and or a Security Key/Biometric Authenticator.

Expand or collapse content Verify Via Google Authenticator
  1. Select Set up next to the Google Authenticator option in your Okta settings.
  2. Download and install Google Authenticator on your mobile device (iOS or Android).
  3. Sign in to Okta with your credentials and select Next.
  4. On the Setup security authenticators page, select Google Authenticator and select Set up.
  5. A QR code will display on your computer screen.
  6. Open the Google Authenticator app on your mobile device.
  7. Tap the plus sign (+), select Scan a QR code, and scan the code on your screen.
  8. Enter the 6-digit code into the prompt and select the Verify button.
Expand or collapse content Verify Via Okta Verify
  1. Select Set up next to the Okta Verify option in your Okta settings.
  2. Download and Install the Okta Verify app from your device's app store (Apple App Store or Google Play Store).
  3. Select Set up next to Okta Verify in your Okta settings and choose your device type.
  4. Scan the QR code on your screen using the Okta Verify app (or tap Yes, ready to scan).
  5. Follow the prompts to enable device biometrics (such as Face ID or fingerprint) and set it up as your Okta FastPass or push notification account if requested.
  6. Once set up is complete, a Get a push notification pop-up notification will display.
  7. Select the Send Push notification button and a notification will be sent to your device.

To have push notifications sent to your device automatically, select the "Send push automatically" checkbox.

Get a Push Notification verification method pop up

If you would like to chose a different security verification method, select the "Verify with something else" hyperlink on the Get a Push Notification pop-up window.

  1. Select the Yes, It's Me button at the bottom of the Okta Verify push notification that was sent to your device.
Did You Just Try to Sign in? page with Yes, It's Me or No, It's Not Me buttons available
  1. Once the security method has been verified, the ctcLink Portal page displays.
ctcLink Gateway Portal page
Expand or collapse content Verify Via Phone
  1. Select Set up next to the Phone option in your Okta settings.
  2. Enter your mobile or landline phone number.
  3. Choose whether to receive a 6-digit code via SMS text message or a Voice call.
  4. Retrieve the passcode from your phone and enter it into the Okta verification field to complete the sign-in.
Expand or collapse content Verify Via Security Key or Biometric Authenticator
  1. Select Set up next to the Security Key or Biometric Authenticatoroption in your Okta settings.
  2. Select your preferred method (such as a hardware security key like a YubiKey, or a platform biometric like Apple Touch ID, Face ID, or Windows Hello).
  3. Allow Okta to collect basic device/model information about the authenticator so it can be named in your account settings.
  4. Perform Physical/Biometric Gesture:
    1. If using biometrics, complete the fingerprint, facial recognition, or device passcode scan when prompted.
    2. If using a hardware security key, insert the key into your port, touch the sensor, or enter your security key PIN.
  5. Click through the final confirmation windows to save your passkey or security key.
  1. Once the security method has been verified, the Account Portal (My Apps) page displays.
  2. Select the Password Settings application icon.
Password Setting application icon
  1. The Account page displays with edit or update options available for each account section.
Expand or collapse content Personal Information
  1. Update personal information by selecting the Edit button in the top-right corner of the Personal Information box.
Personal Information Edit button
  1. Update your personal account information within each of the open fields. These include:
    • First name
    • Last name
    • Primary email
    • Secondary email
    • Mobile phone number
  2. Once new information has been entered, select the Save button in the bottom-right corner of the pagelet to ensure updated personal information is saved.
Personal Information Save button

Updating your personal information in Okta does not change or update your personal information within ctcLink.

Expand or collapse content Display Language
  1. Update the display language by selecting the Edit button in the top right corner of the Display Language box.
Display Language Edit button
  1. Once the new display language has been chosen, select the green Save button to ensure updated display language is saved.
Display Language Save button

Updating your display language in Okta does not change or update your display language within ctcLink.

Expand or collapse content Security Methods
  1. Update the various security methods by selecting from the listed options.
    1. Password - Reset
    2. Okta Verify - Set up
    3. Google Authenticator - Set up
    4. Phone - Set up another
    5. Current phone number - Remove
    6. Security Question - This Option Has been removed as an MFA option for the majority of users in ctcLink. The only types of users that should have this option would be users with no access to email or phones, for example DOC users. For those users that need Security Question as an MFA Option, they will need the security role ZZ Okta MFA Security Questions Role on their user profile.
Sescurity methods reset options

Each security method will need to be verified prior to using that particular security method upon log in.

Account Page with Personal Information, Display Language and Security Methods options