Problem
When you attempt to register for Okta MFA, you receive an error: "Invalid Token Provided".
Environment
Okta MFA
Resolution
Unfortunately, this cannot be resolved on its own. Please contact the IT Service Desk at (517)432-6200. The remedy depends on your Okta account's status. Usually this error is encountered by new users and the service desk will need to finish activating your account on the system. Occasionally a similar error can also occur with existing accounts that have already been in service (due to a device being upgraded (changed device) or updated. or restored a from backup).
Other contact options for the IT Service Desk are available in the
Live Support Options section of the main
Client Portal page (link).
Cause
For new NetID user accounts: New accounts sometimes get stuck in Staged or Activating mode, and need to be manually activated. This requires intervention by the MSU IT Service Desk.
For existing accounts: If you are deploying a new (upgraded) device, or one that's been updated/restored from backup such as iCloud, the stored/restored Okta Verify credential may be rendered invalid. The error, "Couldn't Add Your Account, Operation Failed - Invalid Token" displays when attempting to subsequently add an account to Okta Verify. Okta provides support information regarding this at https://support.okta.com/help/s/article/okta-verify-error-operation-failed-invalid-token. One caution to observe - in the final step if prompted to "transfer creds from another phone" do not do so. Instead, add a new instance of the account enrollment.