Set up Okta Verify

This guide provides instructions for HMS faculty, staff, and students to set up the Okta Verify app for signing in to services protected by your HMS account using biometrics like Face ID and fingerprint.

We recommend setting up Okta Verify on your mobile device before setting it up on your computer.

Note – These instructions are for setting up Okta for your HMS account, which is separate to HarvardKey. For a list of applications that rely on HarvardKey and HMS accounts, refer to the IT services by credential.

Set up Okta Verify

Install Okta Verify

If you do not have Okta Verify installed, download and install it:

• Mobile devices:
  • iOS and iPadOS: Apple App Store
  • Android: Google Play Store

This guide explains how to install and set up Okta Verify on your mobile device for authentication.

Configure Okta Verify on mobile devices

1. Open the Okta Verify app.
2. Follow the prompts to Get Started.
3. When prompted for Ways to verify, select Add account.
4. For Account Type, select Organization.
5. When prompted to Add Account from Another Device, select Skip.
6. When prompted, Do You Have Your QR Code?, select No, Sign In Instead.

Connect your HMS account

1. When prompted to Enter Your Organization's Sign-In URL, enter:
   • Primary URL: login.hms.harvard.edu
   • Alternative URL: (if the primary does not work) hms.okta.com
2. Select Next.
3. When prompted with Harvard Medical School Sign In, enter your HMS account ID. You can find this here on the HMS IT Service Portal by selecting your profile avatar from the menu and then selecting Profile. Your ID will be displayed on your User Profile, in the About section under HMS ID. It is typically in the format ABC123.
4. When prompted, enter your HMS account password.
5. Select Verify.
6. When prompted to Verify with Universal Duo, select Verify.
7. Approve the Duo push notification sent to your device.

Enable push notifications

1. When prompted to Allow Push Notifications?, select Allow. When prompted again about push notifications, select Allow.
2. When prompted to Enable Face ID or Passcode Confirmation, select Enable. When prompted again, select Allow.
3. When the app confirms that you've had your Account Added, select Done.

You have set up Okta Verify on your mobile device. Next, proceed with setting up Okta Verify on Windows and macOS.

Set up Okta Verify on Windows and macOS

Follow these instructions to install and set up Okta Verify on computers running Windows and macOS.

Set up Windows Hello and Touch ID for macOS

• Windows: Follow the instructions to configure Windows Hello, ensuring that the PIN, facial recognition, and fingerprint recognition are enabled.
• macOS: Follow the instructions to use Touch ID on Mac.

If you encounter issues setting up Windows Hello or Touch ID, submit a ticket and request assistance from the Identity and Access Management team.

Install Okta Verify

Note – You must be running a supported operating system to download Okta Verify.

If you do not have Okta Verify installed, download and install it:

• Windows: Download Okta Verify for Windows and install it.
• macOS: Download Okta Verify for macOS in the App Store and install it.

Configure Okta Verify

1. Open the Okta Verify app on your computer.
2. Follow the prompts to Get Started.
3. When prompted for a New account, enter:
   • Primary URL: login.hms.harvard.edu
   • Alternative URL: (if the primary does not work) hms.okta.com
4. Select Next.
5. When the Harvard Medical School Sign In page opens, enter your HMS account ID. You can find this here on the HMS IT Service Portal by selecting your profile avatar from the menu and then selecting Profile. Your ID will be displayed on your User Profile, in the About section under HMS ID. It is typically in the format ABC123.
6. Select Next.
7. When prompted to Verify it's you with a security method, select Okta Verify: Get a push notification and follow the prompts to approve the notification using the Okta Verify app on your mobile device.
8. When prompted for Windows Hello confirmation or Touch ID confirmation, select Enable.

When Okta Verify confirms Account added, your account will now be listed in the Okta Verify app.

Use Okta Verify

Okta Verify will now be available as a sign-in method. The next time you sign in using your HMS account, select Okta Verify as the authentication method. You will be signed in using biometrics or your PIN. Okta Verify will become the default sign-in option for this device.