Objective
FastPass utilizes built-in or external hardware to provide a close-to-passwordless login experience while better protecting the MSU community from phishing attempts and other cybersecurity threats. Follow these steps to install Okta FastPass on your managed Windows device.
Environment
Windows
Okta FastPass
Before You Begin
Please note that the screenshots below were taken from the pre-prod environment and on a particular laptop. Your screens may vary slightly, and the options presented may vary based on device as well. The process should still work.
You will need a valid and working Multi-Factor Authentication (MFA) credential with you to perform these steps. Please visit the Secure IT Website for instructions how to set up a MFA credential if you do not currently have access to one.
Steps
- Open Software Center and select Okta Verify
- Select Install
- After the install is complete the Okta Verify app will display on your desktop. Open a web browser and navigate to auth.msu.edu to complete application configuration
- Select Sign in with Okta FastPass
The very first time you do this it may return you to the login screen. Select
Sign in with Okta FastPass again and it should proceed. You may also then be prompted to allow Okta Verify to open a link, which is normal. Select
Open Link. You can also select the checkbox to prevent this message from opening in the future.
- Since this is your first time authenticating this way, you will be presented with a Welcome to Okta Verify screen
- Select Get Started
- The next screen will explain "How it works", select Next
- Log in using your MSU email address and password
- Verify your identity with the credentials of your choice
We recommend picking the first credential listed (usually Password) and then the second (an MFA credential you have set up). Depending on your situation you may only have these two options.
If Okta FastPass shows as an option, do not select it as it will put you into a loop. If you select it on accident, there will be a grey link towards the bottom-left that will allow you to select another verification method. Use that to break out of the loop and then select a different credential.
- You will now be prompted to enable Windows Hello. Select Enable
The prompt to enable may pop up behind your browser window. If you don't see it right away, check to see if another window is open.
- On the "Set up Windows Hello Screen", select Settings
- This should open a screen saying "Welcome to Windows Hello", with your Windows Settings window behind it. Select Get started
- Depending on your device, it may automatically attempt to set up facial recognition at this point. Follow the instructions on-screen to complete that process.
- On the screen that follows saying "A couple more things...", select Set up PIN
- It will prompt you to verify your account password. Enter your NetID password and select OK
- Now on the "Set up a PIN" screen, enter and confirm your desired PIN. It needs to be at least 6 characters long.
- On the following screen saying "Use Windows Hello with your account", select OK
- Enter your NetID password and select Sign in
- Verify with the MFA credential of your choice
- On the screen that says "All set!", select OK
- You're done! Okta FastPass is now configured to use Windows Hello to access your device.
Additional Info