Versions Compared

Old Version 10

changes.mady.by.user Vandana Patel (Unlicensed)

Saved on

compared with

New Version Current

changes.mady.by.user Ralph Elias

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

(question) What is OKTA Admin?

OKTA Admin is generally used for looking up a customer’s account logs, unlocking their account, or issuing a temporary passwordresetting passwords.

Related links

On this page:

Table of Contents
minLevel1
maxLevel6
outlinefalse
typelist
printablefalse
Panel
panelIconIdatlassian-info
panelIcon:info:
bgColor#F4F5F7

Tutorial: Look up an account

  1. Sign in to sjsu.okta.com.

  2. Click “Admin”.

3. The OKTA Admin page looks like this. Use the search bar to look up the customer by SJSU ID, name, or SJSU email.

4. Click on the account you are looking for.

Panel
panelIconIdatlassian-info
panelIcon:info:
bgColor#F4F5F7

How to use OKTA Admin

View Logs

This shows their account login history. Below are the various states user are commonly found in:

Expand
titleView

  • Invalid credentials: The user is entering either an incorrect SJSU ID or password.

  • Lockout: Occurs after five incorrect login attempts.

  • Suspended: The user tries to unlock their account but unsuccessfully answers the security question consecutively.

Image RemovedImage Added

Unlock Account

*Unlock Account button only appears when user is locked out

When a user is in Locked Out status, the Unlock Account button appears on their account.

You can either Unlock Account for them or advise the customer to wait 21 mins and the account will unlock automatically.

Reset Password

→ Temporary PasswordImage Removed

Only issue a temporary password when a user is unable to use the SJSUOne Password Reset site.

Image Removed

Copy the temporary password and send it to the customer’s SJSU and personal email through iSupport correspondence.

Activate

Image Removed

Expand
titleView Tutorial

  1. Select Reset Password in the account

Image Added

  1. A popup will appear giving you two options. The quickest option is to Send a reset password email which will send to both the user’s personal email and SJSU email (if they have one). If this method does not work or they cannot access their email use the Create temporary password option.

image-20240531-184756.pngImage Added

  1. If you used the temporary password option the user will be prompted to reset their password immediately after logging in with the temporary one.

  2. If you used the reset password email option the customer will recieve an email to both their personal and SJSU email with a link directing them to reset their password.

Info

To check which email they have set as their personal or secondary email you can check their account in SAMI.

Activate Suspended Accounts

Info

Accounts get suspended after lockout when a user attempts to answer their security question incorrectly more than 5 times. This is flagged as a security threat triggering OKTA to change the account status to suspended. In this case you will have to activate the account.

Note

DO NOTreactivate deactivated accounts under any circumstance. This is for suspended users ONLY

Expand
titleView
StepsYou will need to check the user’s logs to check if
Tutorial

  1. If the account is suspended

due to being flagged or a different reason.

  1. you will see it

  2. The logs will show the incorrect security question

attempt

  1. attempts and then will have the customer’s account in a suspended status.

Image Removed
Image Added

  1. If this is the case, press the activate button and inform the customer why they were suspended.

You should be able
Image Added

  1. You will have to unlock the account after activating it.

Image Added

  1. You most likely will need to reset the customer’s password do so after activating and unlocking the account by clicking Reset Password.

Image Added

  1. When the customer

can

  1. is able to log in,

and

  1. offer to assist in walking

the customer

  1. them through how to reset their

security question  Reset security question

  1. Security Question.

Reset security question

Info

It is highly recomended that users reset their security question after the account is activated and they are able to log in again.

Expand
titleView
Steps
Tutorial

  1. Login to sjsu.okta.com

and

  1. click on your name in the top right corner and select “Settings” .

Image Removed
image-20240531-194129.pngImage Added

  1. On the settings page under “Security Methods” select the “Remove” button to delete the current security question.

Image Removed

image-20240531-194002.pngImage Added

  1. A pop-up will appear. Select “Yes” to confirm the removal of the security question.

Image RemovedOn the settings page, it will ask you
image-20240531-194249.pngImage Added

  1. Enter your SJSUOne password to verify and authenticate with DUO.

Image Removed

image-20240531-195041.pngImage Added

  1. You will have to set up a new security question. Click

Set up

  1. “Set up”.

Image Removed
image-20240531-194639.pngImage Added

  1. Enter your SJSUOne password to verify and authenticate with DUO again.

Image Removed
image-20240531-195047.pngImage Added

  1. Select the “Set up” button to begin.

Image Removed
image-20240531-194948.pngImage Added

  1. Users are either able to select a premade security question or create their own (if the user has autofill on it will auto-fill with their credentials, make sure it is removed from the text entry box before proceeding to select a security question).

Image RemovedImage Removed
image-20240531-195238.pngImage Added

The

  1. Once the security question has been

set when there is

  1. reset successfully you should see a message at the bottom right saying “You have successfully enrolled Security Question”.

Image Removed

Account Status

Expand
titleView

Active: The user account is in good standing, and the user can log in and access their authorized resources.

Image Removed
Image Added

Deactivated: The user account has been deactivated, and the user cannot log in or access any resources until it is reactivated.

Image Removed
Image Added