Authentication - How To Switch Multi-Factor Authentication (MFA) to a New Phone (Okta)

Objective

Following these steps will switch your Okta Verify MFA credential from one phone to a new one.

Environment

iOS
Android

Before You Begin

If you do not have access to your previous credential (phone broken, already turned it, etc) and do not have a second credential registered to you, you will need to contact the IT Service Desk (ITSD) at (517)432-6200 for assistance. They can remove the old credential which allows you to register the new one.

Steps

1. Navigate to auth.msu.edu (link)
2. Log in with your MSU NetID and password.
3. Select your name from the top-right corner of the screen and choose Settings from the drop-down menu that appears
4. Select Remove next to the entry for your phone
5. Select Yes when asked "Are you sure you want to remove Okta Verify enrollment?"
6. Verify your identity with the MFA credential of your choice
   If you don't have access to any MFA credential, you will need to contact the IT Service Desk for assistance, per the Before You Begin section of this article.
7. Enter your MSU NetID password and select Verify
8. The old credential is now removed and you can add the new one. Go to Step 6 in How to Register Okta Verify as a Multi-Factor Authentication (MFA) Credential for Your Account (KB link) and continue the process from there.
9. You're done!

Additional Info

To avoid this problem, ITSD recommends registering more than one credential to your account. The additional credentials act as a backup so you can log in to your account even if you lose access to your primary credential.