Set up Okta Verify for your HMS account

This guide provides instructions for HMS faculty, staff, and students to set up the Okta Verify app for signing in to services protected by your HMS account using biometrics like Face ID and fingerprint.

Note – These instructions are for setting up Okta for your HMS account, which is separate to HarvardKey. After setting up Okta Verify for your HMS account, set up Okta Verify for HarvardKey.

Table of contents

• Set up Okta Verify on your mobile device
  • Install Okta Verify
  • Configure Okta Verify on mobile devices
  • Alternative: Set up with a QR code
  • Connect your HMS account
  • Enable push notifications
• Set up Okta Verify and FastPass on Windows and macOS computers
  • Set up Windows Hello and Touch ID for macOS
  • Install Okta Verify
  • Configure Okta Verify
  • Alternative: Add from a mobile device
• Verify device readiness for passwordless authentication (FastPass)
• Use Okta Verify

Set up Okta Verify on your mobile device

This guide explains how to install and set up Okta Verify on your mobile device for authentication. We recommend setting up Okta Verify on your mobile device before setting it up on your computer.

Install Okta Verify

If you do not have Okta Verify installed, download and install it:

• Mobile devices:
  • iOS and iPadOS: Apple App Store
  • Android: Google Play Store

Note – If you encounter a We could not complete your purchase. error message, you must first update your operating system (OS) to a supported version. After updating your operating system, try downloading and installing Okta Verify again.

Configure Okta Verify on mobile devices

1. Open the Okta Verify app.
2. Follow the prompts to Get Started.
3. When prompted for Ways to verify, select Add account.
4. For Account Type, select Organization.
5. When prompted to Add Account from Another Device, select Skip.
6. When prompted, Do You Have Your QR Code?, select No, Sign In Instead.

Alternative: Set up with a QR code

You can also set up Okta Verify on your mobile device using a QR code from the HMS web portal instead of signing in through the app:

1. On your computer, navigate to My Apps Dashboard | HMS Production.
   
   
2. When prompted with Harvard Medical School Sign In, enter your HMS account ID (typically in the format ABC123). Do not use your email address, MED/HMSID, or 9-digit HUID. Then, select Next.
   
   
3. Enter your HMS account ID password. Select Verify.
   
   
4. The HMS Accounts home screen appears. Go down to the Security Methods section. Next to Okta Verify, select Set up or Set up another (depending on your previous configurations).
   
   
   
   
5. On the "Verify it's you with a security method" screen, select Password.
   
   
   
   
6. Enter your HMS account password, then select Verify.
   
   
7. When prompted again to "Verify it's you with a security method", select Universal Duo.
   
   
   
   
8. On the "Verify with Universal Duo" page, select Verify.
   
   
9. Approve the push notification in Duo on your phone.
   
   
   
   
10. On the "Set up security methods" screen, select Okta Verify - Set up another.
    
    
    
    
11. The "Set up Okta Verify" screen appears with a QR code.
    
    
    
    
12. Use your mobile device to scan the QR code. Follow the prompts to complete the setup process.

Connect your HMS account

1. When prompted to Enter Your Organization's Sign-In URL, enter:
   • Primary URL: login.hms.harvard.edu
   • Alternative URL (if the primary does not work): hms.okta.com
2. Select Next.
3. When prompted with Harvard Medical School Sign In, enter your HMS account ID (typically in the format ABC123).
   • Note – If you do not know your HMS account ID, you can find this here on the HMS IT Service Portal. Select your profile avatar from the menu, then select Profile. Your ID will be displayed on your User Profile, in the About section under HMS ID.
4. When prompted, enter your HMS account password.
5. Select Verify.
6. When prompted to Verify with Universal Duo, select Verify.
7. Approve the Duo push notification sent to your device.

Enable push notifications

1. When prompted to Allow Push Notifications?, select Allow. When prompted again about push notifications, select Allow.
2. When prompted to Enable Face ID or Passcode Confirmation, select Enable. When prompted again, select Allow.
3. When the app confirms that you've had your Account Added, select Done.

Okta Verify is set up on your mobile device. Next, proceed with setting up Okta Verify on Windows and macOS.

Set up Okta Verify and FastPass on Windows and macOS computers

Follow these instructions to install Okta Verify and enable Okta FastPass for passwordless sign-in on your computer. Completing all steps in this section, including the device readiness check, activates FastPass on your device.

Set up Windows Hello and Touch ID for macOS

If you encounter issues setting up Windows Hello or Touch ID, submit a ticket and request assistance from the Identity and Access Management team.

Windows Hello

Follow the instructions to configure Windows Hello, ensuring that the PIN, facial recognition, and fingerprint recognition are enabled.

If sign-in options are unavailable in Windows Settings when configuring Windows Hello:

1. Press Win + R, type gpedit.msc, and press Enter.
2. Navigate to Computer Configuration > Administrative Templates > System > Logon.
3. Open Turn on convenience PIN sign-in and select Enabled.
4. Navigate to Computer Configuration > Administrative Templates > Windows Components > Biometrics.
5. Open all four settings here and set them to Enabled.
6. Try again by following the instructions to configure Windows Hello.

Touch ID for macOS

Follow the instructions to use Touch ID on Mac.

Install Okta Verify

If you do not have Okta Verify installed, download and install it:

• Windows: Download Okta Verify for Windows and install it.
• macOS: Download Okta Verify for macOS in the App Store and install it.

Note – If you encounter a We could not complete your purchase. error message, you must first update your operating system (OS) to a supported version. After updating your operating system, try downloading and installing Okta Verify again.

Configure Okta Verify

1. Open the Okta Verify app on your computer.
2. Follow the prompts to Get Started.
3. When prompted for a New account, enter:
   • Primary URL: login.hms.harvard.edu
   • Alternative URL (if the primary does not work): hms.okta.com
4. Select Next.
5. When the Harvard Medical School Sign In page opens, enter your HMS account ID (typically in the format ABC123).
   • Note – If you do not know your HMS account ID, you can find this here on the HMS IT Service Portal. Select your profile avatar from the menu, then select Profile. Your ID will be displayed on your User Profile, in the About section under HMS ID.
6. Select Next.
7. When prompted to Verify it's you with a security method, select Okta Verify: Get a push notification and follow the prompts to approve the notification using the Okta Verify app on your mobile device.
8. When prompted for Windows Hello confirmation or Touch ID confirmation, select Enable.

When Okta Verify confirms Account added, your account appears in the Okta Verify app.

Alternative: Add from a mobile device

If you have already set up Okta Verify on your mobile device, you can add your account to your computer from your phone:

1. Open Okta Verify on your computer and select Get Started.
2. Select Add Account from Another Device.
3. On your phone, open Okta Verify and select the organization profile:
   • HMS: login.hms.harvard.edu
   • HarvardKey: login.harvard.edu
4. Select Add Account to Another Device.
5. Enter the 8-digit code from your phone into the laptop app.
6. Enable Touch ID, Windows Hello, or PIN authentication when prompted.

Verify device readiness for passwordless authentication (FastPass)

1. Open the device passwordless readiness check.
2. If your device is correctly set up, the message Success! This device is using passwordless! appears.
3. If the check does not pass, follow the on-screen prompts to enable biometrics or a PIN.
4. Confirm that both login.harvard.edu and login.hms.harvard.edu are added in Okta Verify.

Note – For additional troubleshooting steps, see the device readiness troubleshooting article on the Harvard IT Service Portal.

Use Okta Verify

Okta Verify is available as a sign-in method. When you sign in using your HMS account, select Okta Verify as the authentication method. Biometrics or your PIN completes authentication. Okta Verify becomes the default sign-in option for this device.