Contents:

How to troubleshoot the Okta "Unable to login" error
How to reset my Okta password through a direct link
How to reset my Okta password through the Okta login page
Reset the Okta Verify Multifactor Authentication Tool or Mobile App to get a 6 digit code
How to set up Okta Verify on my phone
How to Unlock Your Okta Account After Too Many Failed Login Attempts
How to Reactivate Okta after Suspension (60-89 days)
How to Reactivate Okta after Deactivation (90+ days)
How to Enroll and Use Okta Verify

How to troubleshoot the Okta "Unable to login" error

Accessing DATIM through Okta account may give you an error based on the following 3 issues:

1. ISSUE = LOCKED: Your Okta account (state.okta.com) will lock you out if you try to log in and fail too many times in a row.
2. ISSUE = SUSPENDED: I have not logged into Okta or DATIM in over 60 days (but not 90 days) and I think my email address (account) is suspended.
3. ISSUE = DEACTIVATED: Okta Account Deactivated because you may not have accessed Okta or DATIM in over 90 days.

Possible Troubleshooting Solutions:

Step 1 – Try to re-enable your "locked" Okta account by going to https://state.okta.com/signin/unlock

Step 2 – If you try the step above, and it does not work, or have not received an email from Okta, please submit a ticket to our Support Team.

How to reset my Okta password through a direct link

To reset your Okta password, please click on this direct link, https://state.okta.com/signin/forgot-password, and follow the steps provided.

How to reset my Okta password through the Okta login page

Below are the steps to reset your Okta password.

Step 1 – From the state.okta.com login page, type in the email associated with your Okta account and click "Next" in the blue box.

Step 2 – You will be prompted to enter your password on the next screen. If you have forgotten your password, click "Non-DOS Users: Forgot your password?" After clicking this link, you may see the notification below.

Step 3 – If you receive this notification please submit a helpdesk ticket.

Reset the Okta Verify Multifactor Authentication Tool or Mobile App to get a 6-digit code

I am having issues getting the 6-digit code to appear on my phone or mobile device.

This issue requires support team assistance. Please submit a ticket.

How to set up Okta Verify on my phone

"Okta Verify" is the mobile phone application used to log in to your Okta account (state.okta.com). You can download the “Okta Verify” app here: iOS link, Android link.

How to Unlock Your Okta Account After Too Many Failed Login Attempts

This section provides instructions for Okta users to unlock their Okta account after too many failed logins attempts.

When you have made too many failed login attempts, you will receive the below email.

If the account that was locked was an external account, click on “Unlock Account,” and follow the proceeding steps.

Step 1 – Click on “Unlock Account,” in the email that was sent to the mailbox associated with your account. You will be taken to the screen below where you must input your username into the appropriate box and select the email verification option to unlock your account.

Step 2 – You must unlock your account via email. Click “Select” next to the Email option, and you will receive the below email momentarily.

Step 3 – Click “Unlock Account.” It is important to note that this link expires within 5 minutes.

Step 4 – Fill out the answer to the security question you chose during the enrollment process.

Step 5 – Finally, log in with your username and your account will be successfully unlocked.

How to Reactivate Okta after Suspension (60-89 days)

This section provides step-by-step instructions for all users to request to unlock a locked or deactivated Okta account, and what to do if your account is deleted.

Suspension

Okta requires you to log in every 60 days to keep your account active. We encourage you to make it a habit to log in regularly – even if you normally access GHSD Data System annually to avoid the deactivation of your account.

After 50 days without access to your Okta account, you will receive this email prompting you to sign in and avoid your account being locked.

If you do not do so, after 60 days without accessing your Okta Account, it will be suspended.

If you attempt to log in with expired credentials, you will receive this message on the log in page.

To unlock your account after 60 days of no use, follow these steps:

Navigate to Okta's self-service account unlock at https://state.okta.com/signin/unlock and follow the instructions on the site.
In your email inbox you will receive a message from SE-ICAM and/or Okta (not GHSD DataSystems!) to unlock your account.

Step 1 – On your computer, navigate to the Okta Dashboard at state.okta.com. You will see this sign-in page:

Step 2 - Click on the “Unlock Account?” link.

Step 3 – Enter your username and select the means by which you would like to authenticate account, and then click “Select.”

Step 4 – To verify your account by email, click “Send me an email.” You will then receive an email to the mailbox with which you setup your account.

To verify by phone, click “Receive a code via SMS.” You will then receive a code via SMS to the phone number registered with your account.

Step 5 – Depending on how you received your verification, follow the prompts in the verification email or input the code you received via SMS in the login page.

How to Reactivate Okta after Deactivation (90+ days)

If you have not logged in within 90 days, your account will be deactivated, and you will be required to go through the registration process again. You can submit a help desk request using this link.

How to Enroll and Use Okta Verify

This section provides step-by-step instructions to do the following:1) Enroll in Okta Verify, and2) Use Okta Verify.

Enroll in Okta Verify

Step 1 – On your smartphone (DoS or personal), download the “Okta Verify” app (iOS link, Android link)

(Note: “Okta Mobile” is a separate app – it’s useful for access later on, but you don’t need it for enrollment)

Step 2 – On your computer, click the link sent to your email address that reads "Activate Okta Account." You will see this in your email inbox:

Step 3 – Next, you will be prompted to create a password for your account and set-up Okta Verify. Follow the prompts on the screen. Then click "Set up" under Okta Verify.

Step 4 – After clicking "Set up" under Okta Verify, you will be redirected to a screen with a QR code.

Step 5 - Scan the QR code on your screen with your smartphone in the Okta Verify app, and follow the prompts on your phone screen.

Step 6 – After setting up Okta Verify, you may be asked to set up a security question as seen below. Click "Set up" and complete the prompts on the screen to establish your security question.

Step 7 – After setting up your security question you will be redirected to the screen below. Click "Set up later" to complete the process and log in to you new Okta account!

Step 8 – After setting up your security question you will be redirected to the screen below. You do not need to set up a Phone or Smart Card IdP (PIV Card). Click "Set up later" to complete the process and log in to your new Okta account!

Step 9 – Done!

Use Okta Verify

Step 1 – After navigating to the Okta dashboard at state.okta.com, you will be prompted to enter your Username/Password.

Step 2 – After clicking "Sign In," you will then be prompted to “Enter Code.” At this point, navigate to the Okta Verify app on your smartphone to retrieve the code.

Step 3 – Once the Okta Verify App is open, you will see a six-digit One-Time Passcode (OTP) that refreshes every 30 seconds. Note: The blue bar at the top of the OTP will scroll across the screen indicating the time remaining before the code is refreshed.

Step 4 – Before the code expires, navigate back to previous screen and enter the six-digit One-Time Passcode (OTP) into the “Enter Code” box and then click “Verify.”

You will now have access to DoS apps, protected by Okta.

DATIM Okta Access Quick Reference Guide - Non-Enterprise Users (non-@state.gov)