Okta FastPass
Fast Pass is a faster and more secure option for multi-factor authentication in Okta. It provides 'passwordless' authentication for compatible computers and smart phones using biometrics like face or fingerprint recognition. It's faster because it doesn't require entering a password or typing a code, and it's more secure because your password and mutli-factor code is never transmitted (like when receiving codes via text message, phone call, or email) so it can't be used by an attacker. This article includes more information about FastPass and how to use it.
For information on how to set up Okta FastPass on your device, please visit the how-to section.
Changes to Okta Login Page
Be ready for this visual change to Colby's Okta authentication page displayed at okta.colby.edu - it will have a new look that shows FastPass, shown below:
Frequently Asked Questions
What is OktaFastPass?
Okta FastPass is a passwordless authentication method that allows you to securely log into Okta without entering a password. It works through the Okta Verify app (on both mobile and desktop) and turns your device into a trusted, secure key. Instead of a password, it uses the device itself, combined with biometrics like Face ID or Windows Hello, to prove your accounts identity.
Is this optional?
Yes. Although the authentication page shows FastPass as an option to use, FastPass is optional. If you don't have FastPass, you can enter your account name as you normally would and authenticate the same way as you did before. It is another option that you can choose for your MFA factor in your Okta account.
Can I use Okta FastPass without Okta Verify?
No. You must install the Okta Verify app in order to use Okta FastPass. This is a good thing - if you or the device you are using isn't set up for Okta FastPass, Okta Verify is the next best choice for MFA.
Can I use Okta FastPass to sign in to my computer?
No. Okta FastPass is only for authenticating into Okta.
What are the general requirements for enrolling in and using Okta FastPass?
- Your devices (computer and phone) meet or exceed compatible operating system minimums Windows 10, macOS 11, iOS 16, or Android 9 or later versions.
- Your device's web browser is up to date.
- Okta Verify app is installed on the computer you are intending to use Okta FastPass.
Can I use Okta FastPass if my device does not have compatible biometric hardware?
Yes. Instead of using biometrics you may use a device passcode or Personal Identification Number (PIN). You may also use an external webcam with infrared technology or an external fingerprint reader. These can be added to a device that doesn’t have the appropriate built-in hardware.
Do users require the latest version of Okta Verify to use Okta FastPass?
Yes. Users must install the latest version of Okta Verify and set up an account to enroll the device in Okta.
Can facial recognition or fingerprint be used with Okta FastPass?
Yes, facial recognition or fingerprint (referred to as biometrics) can be used with Okta FastPass.
If I have biometrics set up with Okta FastPass, may I also enroll using a device passcode or Personal Identification Number (PIN)?
Yes. You may also use a device passcode or PIN as a fallback option.
Is Okta FastPass supported on Linux Desktops or Chromebooks?
FastPass is not currently available for Linux Desktop or ChromeOS operating systems.
Does Okta FastPass require devices to be issued and managed by Colby?
No, Okta FastPass works across both personally owned and Colby managed devices.
Is Okta FastPass Fast Identity Online (FIDO) compatible?
No. Okta FastPass isn't compatible with Fast Identity Online (FIDO).
Does Okta FastPass support YubiKey?
Okta FastPass is its own authentication method similar to using a YubiKey. You may use a YubiKey as an additional choice for multi-factor authentication.
Why must Okta FastPass be set up on each individual device?
Okta FastPass creates a unique, device-specific security key pair for authentication. This involves generating and storing a private key on that specific device, which is protected by biometrics or a device passcode. Each device needs to provide its own unique set of security keys for authentication.
What are the required device specifications for Windows devices to support facial or fingerprint recognition?
Your device needs a camera that supports Windows Hello. Navigate to Settings > Accounts > Sign-in options. If you see options for Windows Hello Face or Windows Hello Fingerprint, your device supports these features.