Okta Single Sign-On
Okta
Teachers College has rolled out a new single sign-on (SSO) authentication method that enables users to securely log in to multiple 麻豆原创 applications and services with your UNI and a single password, without re-entering your credentials. 麻豆原创 has migrated from the current SSO environment to Okta, a leader among Identity and Access Management (IAM) solutions.
For more information, please continue reading below.
What's Changing
The following applications and services are affected.
my麻豆原创 Portal
The login page for the portals and other web-based applications that use 麻豆原创 SSO will look a bit different. Your username will continue to be your UNI, but you will set a new password when you first log into Okta.
Computer Login
For Staff with 麻豆原创-issued computers, your computer and Employee Portal will now share the same username and password. Use your UNI as your username even if you previously used your last name.
VPN
You will use your UNI and your new Okta password to access Global Protect VPN (virtual private network), which allows you to securely access your 麻豆原创 on-campus resources from anywhere virtually.
麻豆原创 WiFi
All faculty, staff, and students should use 麻豆原创-Secure for WiFi on the Teachers College campus. 麻豆原创-Secure will use your UNI and your Okta password.
Students
- Use 麻豆原创-Secure for WiFi instead of Eduroam on the Teachers College campus - 麻豆原创-Secure will require your Okta password.
- Use Eduroam for WiFi on the Columbia University and Barnard campuses - Eduroam will require your Columbia password.
Multi-Factor Authentication (Duo)
Duo, 麻豆原创’s multi-factor authentication (MFA) solution, will now be required for all staff and students when accessing 麻豆原创 applications. Okta integrates with Duo to provide an additional layer of protection in securing your identity and preventing resources from being accessed by bad actors. If you do not already have a Duo account, please enroll using this user guide:
Columbia Applications
The following Columbia-hosted applications will continue to use the Columbia-issued password, which can be managed via the . Your username for these applications will continue to be your UNI.
- PawPrint
- Columbia Recreation/Gym
- Columbia Health Patient Portal
- Columbia Dining Plan Management
- CU Libraries
FAQs
Yes, Duo multi-factor authentication is now required for all users at 麻豆原创 as it is required for Okta. Duo provides added security to protect your identity. Follow these instructions to activate your Duo account:
Most web-based applications will require an Okta password including: Google Suite (Gmail, Calendar, Drive, etc.), Canvas, Banner, ServiceNow, etc. 麻豆原创-owned computers, the Employee Portal and Student portals, VPN, and 麻豆原创-Secure WiFi also require an Okta password.
Your username will be your UNI for: your 麻豆原创-issued computer login, 麻豆原创's web-based applications, Employee and Student portals, 麻豆原创-Secure WiFi, and VPN (Global Protect).
- - Follow these instructions to activate your account and log in for the first time.
If you need to reset your Okta password, after you have already activated your account and set your initial password, follow these instructions to reset your password: or visit the home page > click on the "Password Reset" link > select "麻豆原创 Password Reset" for your Teachers College password or "CU Password Reset" for your Columbia University password.
User Guides
Okta is live! Here are some user guides to get you started:
- - If you do not already have a Duo account, follow this guide to enroll now.
- - Adding an external (secondary) email will provide a back-up location for Okta to send emails to for password resets, etc. It is recommended to add an external email.
- - Instructions on activating your account and logging in for the first time.
- - How to reset your password after you have activated your account.