---
title: Okta MFA Integration
slug: reference-guide-3-0-0/okta-mfa-integration
description: Learn how to integrate Okta with Single Connect for secure token verification. Authenticate users with Okta Verify or Google Authenticator. This step-by-step guide provides instructions on setting up the integration through the Okta API, requiring the API
docTags: 
createdAt: 2022-07-31T18:30:26.000Z
---

For Okta integration, users should log in to Okta with the email addresses defined in Single Connect. After logging in to the Okta portal, token verification can be done through different verification methods.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/9XVPhw2M6ivBPQWHU2A5f_image.png" size="60" width="399" height="292" caption="Okta Verification Methods" position="center" showCaption="true"}

- To use the Okta verification method, users must download the **Okta Verify** mobile app. Okta Verify should be activated from the user portal settings area, followed by a scan of the barcode that appears on the portal’ mobile application section.
-
  Users should also download the Google Authenticator mobile app if they wish to use the **Google Authenticator** method. The Google Authenticator should be activated from the user portal settings area, followed by a scan of the barcode that appears on the portal’ mobile application section.


::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/4vOqO-BCwDwfDTNwsihvJ_image.png" size="34" width="346" height="396" caption="Okta Verify Barcode Viewer	" position="center" showCaption="true"}

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/fJ54aQH9I9Admi5M4hslV_image.png" size="34" width="323" height="394" caption="Google Authenticator Barcode Viewer" position="center" showCaption="true"}

Single Connect integrates with Okta via API, as long as certain parameters are defined in Single Connect:

-
  API key (the API key is created by Okta for each customer environment)
-
  URL (the URL is unique for each customer environment)


To adjust the Okta Integration Settings:

1. Navigate to **Administration **> **System Config Manager**.
2. Set the following parameters:
   mfa.provider=okta (default: internal)
   mfa.external.provider.okta.apikey=xxx (encrypted)
   mfa.external.provider.okta.hostname
   mfa.external.provider.okta.factor=\{token\:software\:totp, sms, push} (default: token\:software\:totp)
   mfa.external.provider.okta.totpprovider=\{google, okta} (default: google)

- With Okta enabled, the token can be sent in different ways:

| **token\:software\:totp** | Token in the mobile app is used. (Okta Verify or Google Authenticator) |
| ------------------------- | ---------------------------------------------------------------------- |
| **SMS**                   | Token is sent by SMS.                                                  |
| **Push**                  | Verification is confirmed from the mobile application. (Okta Verify)   |