Welcome to Okta, Endicott’s new Identity and Access Management (IAM) platform! 

Okta is one of the industry-leading solutions for Single Sign-On (SSO) and multifactor authentication (MFA), leveraged by some of the largest organizations to provide their employees with secure, streamlined access to applications and systems through a single login. Okta plays a pivotal role in preparing Endicott to meet the current and future technology needs of our Community, gradually replacing individual logins with a unified authentication platform. Applications such as Workday, VPN, and various other systems will begin to use Okta for authentication. 

The Okta Verify application will also replace Duo and Google Authenticator as Endicott's preferred MFA solution, allowing more applications and systems to be protected by MFA while ensuring your authentication experience remains streamlined and efficient. Endicott will require MFA on all supported accounts to protect sensitive employee and student data and align with State and Federal data security guidelines.

Please follow the steps below to set up your Endicott Okta account for the first time and configure your multifactor authentication method:

  1. In your web browser, navigate to https://endicott.okta.com, where you’ll be presented with the Endicott-branded login page (see screenshot below). In the Username field, enter your Endicott email address and click “Next”



  2. When prompted, enter the password you use to access your Endicott accounts – this should be the same password you use to access your Endicott email. Click “Verify.”



  3. Next, you will be prompted to configure multifactor authentication for your account, providing an additional verification layer when logging into Okta. By adding another layer of authentication, your account remains secure if your password is compromised. 

    • Please select and configure one of the following multifactor authentication options:
      • Okta Verify: Okta Verify is a mobile authenticator app installed on your mobile device -- it is the recommended multifactor option for all Endicott Okta accounts. In addition to providing a second layer of authentication for Okta sign-ins, Okta Verify supports MFA for accounts not yet integrated into Okta and allows "passwordless" sign-ins via Okta FastPass on trusted devices. When signing into Okta, you will receive a push notification on your registered mobile device, asking you to approve the sign-in process. Once installed, the app does not collect personal information from your device and uses minimal mobile data.

        Step-by-step video instructions for configuring Okta Verify on your device are here: How To Set Up Okta Verify On a New Device (YouTube). Otherwise, please download the Okta Verify application from the Apple App Store or Google Play Store and follow the onscreen instructions. 

        When configuring the application for Okta access, please choose Organization as your account type.



      • Phone Verification: You may also choose Phone Verification to receive one-time authentication codes via SMS. While this option does not require an app install, you cannot use features such as Okta FastPass and must continue using your existing multifactor method for protected accounts. 

        To configure Phone Verification, supply your 10-digit mobile phone number and click “Send Code.” Within 30-60 seconds, you will receive a text message with a 6-digit verification code.



        Enter the 6-digit code into the “Enter Code” field and click “Verify.”

    • If you have questions or need assistance, please visit https://endicott.freshservice.com/support/home and submit a ticket using the "New Ticket" button in the top right-hand corner of the screen. If you cannot configure either authentication option, Okta Verify can be deployed to an Endicott-issued laptop in select cases.

  4. After verifying your multifactor authentication option, your browser should redirect you to your Okta dashboard. Here, you will begin to see any Okta applications assigned to you by an Okta Admin -- it may take some time for applications to be assigned to your account.