In the Admin Console, go to Security Multifactor.If it isn't present in the line of text, the YubiKey hasn't been successfully configured.Īctivate the YubiKey factor and add YubiKeys Search for the Public Identity value in the generated OTP.Allow YubiKey to generate the OTP within the text editor. Open a text editor, then tap the YubiKey that was configured for use with Okta.

Note the Public Identity value, listed as the second value item in the file.csv file generated by the YubiKey Personalization Tool. If the Public Identity value isn't present, the YubiKeys aren't configured correctly.

Verify that the Public Identity value is in the generated OTP file.

Verify that you've clicked all three of the Generate buttons. However, if you’re experiencing errors, it’s a best practice to use Configuration Slot 1 exclusively for Okta.Ĭlick all three Generate buttons. If you plan to use your YubiKeys for services other than Okta, you can use Slot 2 for Okta configuration. Each YubiKey is configured for the YubiCloud in Configuration Slot 1 by default. If you encounter problems with generating your Configuration Secrets file or in configuring your YubiKeys, verify that you've completed the following tasks. Troubleshoot the Configuration Secrets file Once completed, follow the steps under Uploading into the Okta Platform found in Using YubiKey Authentication in Okta.

Yubico sends the requested number of 'clean' hard tokens that you can distribute to your end users.īe sure to read and follow the instructions found in Programming YubiKey for Okta Adaptive Multi-Factor Authentication carefully. csv that allows you to provide authorized YubiKey to your org's end users. Find details on generating this file (which might also be called a YubiKey or Okta secrets file) from Programming YubiKeys for Okta Adaptive Multi-Factor Authentication. Create a YubiKey configuration fileīefore you can enable the YubiKey integration as a multifactor authentication option, you need to obtain and upload a Configuration Secrets file generated through the YubiKey Personalization Tool. If this information is missing, the YubiKeys may not work properly.Īfter you've configured the YubiKeys and uploaded the YubiKey OTP secrets file to Okta, you can distribute the YubiKeys to your end users. Only the YubiKey Personalization Tool can populate the public and private key information for each YubiKey. Don't create a YubiKey OTP secrets file manually.

Yubi keys