OKTA Admin Training
- Ashley Irawan (Unlicensed)
- Ralph Elias
- Vandana Patel (Unlicensed)
What is OKTA Admin?
OKTA Admin is generally used for looking up a customer’s account logs, unlocking their account, or resetting passwords.
TRAINEES: AFTER READING THIS PAGE:
View info for OKTA Applications Tab in Service Desk Knowledge Base: https://sjsu-its.atlassian.net/wiki/spaces/SDKB/pages/3363766276
Related links
On this page:
Tutorial: Look up an account
Sign in to sjsu.okta.com.
Click “Admin”.
3. The OKTA Admin page looks like this. Use the search bar to look up the customer by SJSU ID, name, or SJSU email.
4. Click on the account you are looking for.
How to use OKTA Admin
View Logs
This shows their account login history. Below are the various states user are commonly found in:
Invalid credentials: The user is entering either an incorrect SJSU ID or password.
Lockout: Occurs after five incorrect login attempts.
Suspended: The user tries to unlock their account but unsuccessfully answers the security question consecutively.
Unlock Account
*Unlock Account button only appears when user is locked out
When a user is in Locked Out status, the Unlock Account button appears on their account.
You can either Unlock Account for them or advise the customer to wait 21 mins and the account will unlock automatically.
Reset Password
Select Reset Password in the account
A popup will appear giving you two options. The quickest option is to Send a reset password email which will send to both the user’s personal email and SJSU email (if they have one). If this method does not work or they cannot access their email use the Create temporary password option.
If you used the temporary password option the user will be prompted to reset their password immediately after logging in with the temporary one.
If you used the reset password email option the customer will recieve an email to both their personal and SJSU email with a link directing them to reset their password.
To check which email they have set as their personal or secondary email you can check their account in SAMI.
Activate Suspended Accounts
Accounts get suspended after lockout when a user attempts to answer their security question incorrectly more than 5 times. This is flagged as a security threat triggering OKTA to change the account status to suspended. In this case you will have to activate the account.
DO NOT reactivate deactivated accounts under any circumstance. This is for suspended users ONLY
If the account is suspended you will see it
The logs will show the incorrect security question attempts and then will have the customer’s account in a suspended status.
If this is the case, press the activate button and inform the customer why they were suspended.
You will have to unlock the account after activating it.
You most likely will need to reset the customer’s password do so after activating and unlocking the account by clicking Reset Password.
When the customer is able to log in, offer to assist in walking them through how to reset their Security Question.
Reset security question
It is highly recomended that users reset their security question after the account is activated and they are able to log in again.
Login to sjsu.okta.com click on your name in the top right corner and select “Settings” .
On the settings page under “Security Methods” select the “Remove” button to delete the current security question.
A pop-up will appear. Select “Yes” to confirm the removal of the security question.
Enter your SJSUOne password to verify and authenticate with DUO.
You will have to set up a new security question. Click “Set up”.
Enter your SJSUOne password to verify and authenticate with DUO again.
Select the “Set up” button to begin.
Users are either able to select a premade security question or create their own (if the user has autofill on it will auto-fill with their credentials, make sure it is removed from the text entry box before proceeding to select a security question).
Once the security question has been reset successfully you should see a message at the bottom right saying “You have successfully enrolled Security Question”.
Account Status
Active: The user account is in good standing, and the user can log in and access their authorized resources.
Deactivated: The user account has been deactivated, and the user cannot log in or access any resources until it is reactivated.
