Android Devices
Please read first
Before you begin to setup your account, we wanted to prepare you for 2 security policies that are required to setup your new Work Account. We will provide more details on these items further in the document.
You will need to set up a Screen Lock (See step 2)
You will need to be running at minimum Android 4.4.
1. Set a screen lock and PIN (This is required by our security policy. Without it the connection will not be successful.)
You can use something as simple as a 4-digit PIN, but we suggest you use at least a 6 digit PIN (an unlock pattern, fingerprint, or face unlock may also be used if you phone supports it.)
Where to find these settings may differ depending on your version of Android. Check the following:
Settings: Lock Screen or
Settings, Security, Screen lock or
Settings, Security & Location, Screen Lock
We suggest setting your screen lock to 30 seconds or 1 minute. You may set it to a timeout of your choosing, but in order for your account to receive data the maximum it can be is 15 minutes.
Setting up your new work account
If you came here because you don't have access to a computer, we recommend that you try to find one. During the OKTA setup process, you will be prompted to setup your multifactor. If you can't set up on a computer, then setup the SMS authentication. Later on you can setup Authy which is the preferred Authentication App (instead of Google Authenticator.) Also if you setup BioMetric Authentication you can only use your Biometric on the device you setup it up on. So if you have a phone and a tablet and both have Biometric login, you can't use the biometric authentication you setup on one device on another device. After your OKTA account is setup you can go in and add more Biometric Authentication for other devices.
If you have already setup your account on a computer, just follow these steps. You won't need setup Multifactor Authentication or change your password but other than that. This will walk you through setup.
If you would like to set up by computer follow these instructions: http://cruapps.cru.org/your-1st-hour
1. Due to the differences in Android, there might be some differences between our screen shots and what you see
2. Find the correct settings and add an account and you might be presented with various options, select Google.
3. If you can't find Accounts in your settings, then open up the Gmail App and select your account. At the bottom of the list of accounts is Add a New account. Click that and follow the below steps.
4. You will now be taken to a Google Account screen where you will enter in your work email address and then click Next. If you entered the correct address you will get this welcome screen. click accept:
4.If you put in the proper email address, you will be taken to the Okta Login Screen. OKTA will eventually be the way we log in to all the ministry’s apps and services. If you have ready setup Okta, you can log in and skip the setup two-factor. If this is your first time setting up Okta, doing this step will prepare you for the future when Okta will be our login system. After you log in with your assigned password, you will change the password to what you would prefer. Please note that GMail requirements for Passwords are more strict than normal OKTA requirements.
5. if this is the first time you are logging in, you will then be prompted to change your password from the one assigned to you. If you have already setup your account then you should not receive this step.
6. If you have never set up your okta account then you will be prompted to set up your Multi-Factor Authentication. Click "Setup" under the Google Authenticator option. Remember that when any site prompts you to use "Google Authenticator" for Multi-Factor Authentication (MFA), we recommend that you use the Authy app. (www.authy.com). We recommend that you setup both methods of Authentication. If you only have a mobile device, stop and please sign on to another device with your account, so that you can setup Multifactor on your device. If you don't have access to another device, then please go down to the SMS setup. You can setup authenticator on your device later on. To setup later on, please go to these directions:
https://help.checkmyokta.com/article/813-adding-a-new-device
7. You will be prompted to select either Android or iPhone. The choice is there to give you a link to the correct app store to download Google Authenticator. Again, we recommend that you instead use Authy.
If you don't already have it installed, pause here and install the Authy app on your mobile device (instead of Google Authenticator). Links to the iOS App Store (for Apple products), Google Play Store (for Android and Samsung devices), Windows or Mac, and Linux are available. The YouTube video at https://youtu.be/EBdPzv75i3A?t=82 is a quick walk-through of how to set up Authy.
Open the Authy app on your mobile device.
In Authy, enter your phone number and your email address to create your Authy account.
Receive via SMS (text) message the registration code (or obtain it by phone call) and enter it into Authy to verify your new Authy account.
In Authy, click Add Account.
On Android & Samsung devices, tap the "…" icon in the upper right corner to open the menu, and select the Add Account option.
On the Authy Desktop app, click the + (plus) sign in the upper right corner.
Create an Authy Backups Password when prompted.
8. For this step we recommend that you login to a friends phone in an Incognito/Private Tab. (Click here for instructions for entering Incognito mode in Chrome.) You will need to scan a QR code for your account. Use your mobile device to scan the QR Code displayed by Okta, then click Next.
Note: If you need to do this step at a later time, please follow this documentation: https://help.checkmyokta.com/article/813-adding-a-new-device
9. In Authy, feel free to choose a new icon and rename the MFA token name for Okta.com: givename.surname@cru.org, if you like. Something like "Okta" should be sufficient.
Authy needs no internet connection to generate a time-based code, but it does require an accurate time on your mobile device. The Authy app will generate a 6-digit, time-based code on your mobile device.
Enter the 6-digit code that was generated by Authy into Okta and click Verify.
10. If you entered the correct code, you should be redirected back to the Set up multifactor authentication page.
12. Now it’s time to set up SMS authentication. Select your country and then put in your mobile number and click send code.
13. Check your mobile device. Enter the 6-digit code that was texted to you and click "Verify".
14. If you have entered the code properly you will be taken to the Welcome to your new account screen. Click Accept and you are now set up.
The below steps are optional and are currently disabled. They might be re enabled in the future and this section is for if we re enable it.
15. Once you hit accept, depending on your version of Android, it will check to see if you have Device Policy Manager installed. If you don’t have it installed you will be prompted to install it. In order to add your work email account to your phone you must add the Device Policy app. In addition, you must have a security lock on your phone and the security policy will automatically lock your phone after 15 minutes of inactivity. NOTE: If you Android Device Policy Below, please uninstall it. If you don't see it in your apps, go to play.google.com, look up Android Device Policy and then hit uninstall.
16. Depending on which version of Android you have, you might be prompted to install a work profile. The work profile is a way to separate out your personal information from work data. In addition, it allows admins to remove work data from your device and leave your personal information intact. If you would like to keep your personal and work accounts together on your device, please contact the help desk on how to keep all your accounts together.
17. Here are the Google apps we recommend you install and use.
Google Chrome - By signing into Chrome, your data will sync across devices.
Congratulations you are now finished with setting up your Android device. Please now return to the first-day documentation to help you customize your computer with helpful Google configurations.