OKTA Admin Training

What is OKTA Admin?

OKTA Admin is generally used for looking up a customer’s account logs, unlocking their account, or resetting passwords.

Tutorial: Look up an account

  1. Sign in to sjsu.okta.com.

  2. Click “Admin”.

 

 

3. The OKTA Admin page looks like this. Use the search bar to look up the customer by SJSU ID, name, or SJSU email.

4. Click on the account you are looking for.



 

How to use OKTA Admin

View Logs

This shows their account login history. Below are the various states user are commonly found in:

  • Invalid credentials: The user is entering either an incorrect SJSU ID or password.

  • Lockout: Occurs after five incorrect login attempts.

  • Suspended: The user tries to unlock their account but unsuccessfully answers the security question consecutively.

 

Unlock Account

*Unlock Account button only appears when user is locked out

When a user is in Locked Out status, the Unlock Account button appears on their account.

You can either Unlock Account for them or advise the customer to wait 21 mins and the account will unlock automatically.

Reset Password

  1. Select Reset Password in the account

  1. A popup will appear giving you two options. The quickest option is to Send a reset password email which will send to both the user’s personal email and SJSU email (if they have one). If this method does not work or they cannot access their email use the Create temporary password option.

  1. If you used the temporary password option the user will be prompted to reset their password immediately after logging in with the temporary one.

  2. If you used the reset password email option the customer will recieve an email to both their personal and SJSU email with a link directing them to reset their password.

To check which email they have set as their personal or secondary email you can check their account in SAMI.

Activate Suspended Accounts

  1. If the account is suspended you will see it

  2. The logs will show the incorrect security question attempts and then will have the customer’s account in a suspended status.

  1. If this is the case, press the activate button and inform the customer why they were suspended.

  1. You will have to unlock the account after activating it.

  1. You most likely will need to reset the customer’s password do so after activating and unlocking the account by clicking Reset Password.

  1. When the customer is able to log in, offer to assist in walking them through how to reset their Security Question.

Reset security question

  1. Login to sjsu.okta.com click on your name in the top right corner and select “Settings” .

 

  1. On the settings page under “Security Methods” select the “Remove” button to delete the current security question.

 

  1. A pop-up will appear. Select “Yes” to confirm the removal of the security question.

  1. Enter your SJSUOne password to verify and authenticate with DUO.

 

 

 

  1. You will have to set up a new security question. Click “Set up”.

 

  1. Enter your SJSUOne password to verify and authenticate with DUO again.

 

  1. Select the “Set up” button to begin.

  1. Users are either able to select a premade security question or create their own (if the user has autofill on it will auto-fill with their credentials, make sure it is removed from the text entry box before proceeding to select a security question).

 

  1. Once the security question has been reset successfully you should see a message at the bottom right saying “You have successfully enrolled Security Question”.

Account Status

Active: The user account is in good standing, and the user can log in and access their authorized resources.

Deactivated: The user account has been deactivated, and the user cannot log in or access any resources until it is reactivated.