Google Authenticator is a software-based mechanism that uses 6-digit one-time secrets to verify identity. Multiple Applications implement the Google authentication protocol and can be registered using the Google Authenticator method.

WSU Recommendation

WSU recommends the use of Google Authenticator as an alternative to Okta Verify. However, Google Authenticator may not provide sufficient verification in some specific applications.

The following resources can be used to view the pro's and con's of each MFA option:

How to Get an Authenticator

ITS recommends the following software TOTP authenticator apps:

  • Google Authenticator
  • Yubico Authenticator
  • LastPass (password manager app)
  • LastPass Authenticator (smartphone authenticator app)
  • Okta Verify
  • Apple Keychain
  • Microsoft Authenticator

Google Authenticator:

Use your device's App Store to find and install Google Authenticator (or another compatible product)

Yubico Authenticator:

Yubico Authenticator is software provided by the same company that makes the hardware Yubi Keys that ITS also recommends for FIDO2. Yubico Authenticator is available for Linux, Mac, Windows, Android, and iOS. This is a great solution if you do not own a mobile device.

Download Yubico Authenticator Here

Yubico provides installation instructions for each platform at the links below:

How to Set Up

Google Authenticator

Google Authenticator Set Up (YouTube)

Google Authenticator

  1. On account.wsu.edu, select the Manage Security Methods option, find the Google Authenticator security method, and select Setup.
    Google Authenticator setup option

  2. Verify with your current WSU password. If you already have an alternative security method enabled, you may also be prompted to complete MFA.
    WSU authentication password prompt

  3. Select Set up → for Google Authenticator.
    Google Authenticator setup prompt

  4. Additional setup instructions for Google Authenticator will appear. Please be sure to download the Google Authenticator app from the Apple App Store for iOS devices or the Google Play Store for Android devices.
    Google Authenticator QR Code

  5. Launch the Google Authenticator app on your mobile device and continue through the prompts until you receive the option to Scan a QR code.

  6. When your camera opens, hold your mobile device up and scan the QR code. A six-digit code will appear in the app.
    Six-digit code in Google Authenticator app

  7. On the original setup instruction page, select Next.
    Setup instructions for Google Authenticator security method

  8. Enter the six-digit code from the app and select Verify.
    Code prompt for the Google Authenticator security method

  9. Once successfully enabled, you will receive a You have successfully set up Google Authenticator pop-up message. The Google Authenticator security method will also have an option to Remove as needed.
    Successful Google Authenticator pop-up message

Simplified Instructions for Google Authenticator:

  1. Login to your account at login.wsu.edu.
  2. Click your name in the upper right, then settings.
  3. In the Security Methods, click the "Set up" or "Set Up another" box next to "Google Authenticator."
  4. Authenticate to prove your identity.
  5. Click "Set up" to begin setting up the Google Authenticator method.
  6. Open the Google Authenticator app on your phone, then click the option to add a new profile (plus) .
  7. Use your phone's camera to scan the barcode.
  8. Click Next in the Okta setup wizard once Google Authenticator recognizes the barcode.
  9. Enter the code provided by Google Authenticator into the Okta setup dialog.

Yubico Authenticator

See the instructions below for help setting up Yubico Authenticator with Okta. These instructions are written for Windows but should be similar for other platforms.

  1. Open the Yubico Authenticator app if it is not already open. 
  2. Select the "Accounts" icon (shaped like two people) on the left-hand side.
  3. On the right hand side, click "Add account." 
  4. Switch to your web browser and go to https://account.wsu.edu. 
  5. On account.wsu.edu, select the Manage Security Methods option, find the Google Authenticator security method, and select Setup. (Google Authenticator is the Kleenex of Authenticator apps.)
    Google Authenticator setup option

  6. Verify with your current WSU password. If you already have an alternative security method enabled, you may also be prompted to complete MFA.
    WSU authentication password prompt

  7. Select Set up → for Google Authenticator.
    Google Authenticator setup prompt

  8. Additional setup instructions for Google Authenticator will appear. Click the "Can't scan?" button.
    Google Authenticator QR Code
  9. Copy the alpha-numeric Secret key from Okta and paste it into the Yubico Authenticator app:

  10. Click the save button.
  11. Your new account will now show up in the list. To use the code, you can copy and paste it, or type the code into Okta during login.

How to Use

  1. Enter your username to login in to login.wsu.edu.
  2. Enter your password when prompted.
  3. When prompted to verify your account, if Google Authenticator isn't presented, choose "Select another Auth..."
  4. Open Google Authenticator or Yubico Authenticator on your phone.
  5. Enter the code provided by Authenticator into the Okta Login Widget and click Next.
  6. Follow the prompts to complete the login.

Further Reading

WSU AG's Office - Will Using Multi-Factor Authentication Make my Device Susceptible to Public Records Requests?

Get verification codes with Google Authenticator

Automatically fill in one-time verification codes on iPhone

  • No labels