Adding a security key (yubikey) to a Bowdoin account in Okta

Questions

  • How do I set up a YubiKey with my Bowdoin Okta account?
  • How do I enroll a hardware security key in Okta?
  • IT gave me a YubiKey — how do I activate it?
  • How do I add a security token as an MFA factor in Okta?
  • Can I use a YubiKey to log in to Bowdoin services instead of my phone?

Environment

This article applies to Bowdoin faculty and staff who have been issued a YubiKey hardware security token by Bowdoin Information Technology. YubiKeys are distributed for specific use cases and are not available on request. If you believe you need a hardware security key, contact the Service Desk. The enrollment steps below apply to macOS (Sequoia and Tahoe) and Windows 11.

USB-A YubiKey security token USB-C YubiKey security token

Resolution

  1. Sign in to Okta at login.bowdoin.edu.
  2. Click your name in the upper-right corner and select Settings.
  3. Scroll down to the Security Methods section and click Set up another in the Security Key or Biometric Authenticator row.
    Image of the Security Key or Biometric Authenticator section of the Security Methods screen
  4. Sign in to your account again when prompted to confirm your identity.
    Image of the security methods screen
  5. On the Set up required page, click Set up, then click Set up again on the device setup screen.
    Screenshot of the biometric authenticator setup screen.
Already have a biometric authenticator? If Touch ID on macOS or Windows Hello is already enrolled, a window will appear prompting you to log in using that method. Do not log in with it. Instead, click Other options to access the option to add a new security key.
  1. Select Security Key from the list of options and click Continue.
    Sign In dialog asking to choose where to save a passkey, with Security key selected and Continue button below.
  2. Plug your YubiKey into an available USB port on your computer. Leave the browser window open — it will advance automatically once the key is detected.
    Device prompt screen shot asking you to set up a security key

macOS only

macOS will display two prompts after the key is plugged in. First, a dialog asks whether to allow access to the accessory — click Allow.
Image of the Allow Accessory security window in macOS

A second window may appear prompting you to set up a keyboard. Close that second window without taking any action.
Keyboard setup assistant window.


Windows 11 only

Windows may take a moment to install device drivers for the YubiKey automatically. Wait for the installation to complete before proceeding.


  1. When the setup page shows the YubiKey is ready, look at the physical key. A small light should appear in the circular area on the key. Tap that circle with any finger to complete enrollment.
Done: Once you tap the key, the setup window will close and your YubiKey is enrolled and ready to use as an MFA factor.

Additional Help

If you need further assistance, you have several options:

  • Bowdoin Bot: Chat with Bowdoin Bot directly from any KB page for instant answers.
  • Phone: Call the Bowdoin College Service Desk at (207) 725-3030.
  • In person: Visit the Tech Hub in Smith Union during business hours.
  • Submit a ticket: Request assistance through the Service Catalog.