1. Introduction to Okta
What is Okta?
Okta is an identity and access management (IAM) system that ensures that the right people and job roles in an organisation (identities) can access the tools/resources (services/applications) they need to do their jobs.
The system acts as a central access gateway for users by using one set of login credentials to authenticate them and then allow access through to any relevant tools. This is commonly referred to as single sign-on (SSO) and replaces the traditional, bygone process of using separate login credentials for each resource being accessed.
Examples of tools that might be accessed via logging in through Okta include:
- HR systems (BambooHR, Employment Hero etc.)
- Google Workspace (Gmail, Sheets, Docs etc.)
- Dropbox
- AWS accounts
- File servers
- VPN
- Computers
...and many more.
The system also provides automated user provisioning functions - think of processes covering on/off-boarding and user changes.
Wellcom Technology will continue integrating applications/services into this system and making them available to each of the regions whenever possible, so please keep an eye out for announcements to ensure you are ready to access the latest applications.
How does it work?
Okta uses multiple things (or ‘factors’) to verify/authenticate your identity:
a password (something you know).
a mobile device using the ‘Okta Verify’ app (something you have).
in some cases, it can also use biometrics (something you are).
To log in to Okta and access applications you will need the following:
A ‘log-in’ or username to identify your account. Your username usually takes the format of your assigned Wellcom Group email address (e.g. ‘john.doe@wellcomww.com’).
A password. This is known only to you and can be updated by you or with the assistance of the service desk.
A mobile device with the Okta Verify app installed on it. This app provides a second factor to confirm your identity.
The Wellcom service desk will have set up an account for you. The username is your primary work email address (usually in the format of firstname.lastname@wellcomww.com). The username and a temporary password to this account will have been shared with you, most likely by your line manager. The first time you log in using Okta you will be asked to change the temporary password and you will need to set up multi-factor authentication on your mobile device - the system will guide you through the setup and the steps are outlined in the following article.
IMPORTANT: As set out in the Wellcom User Password Policy, user set passwords do NOT expire, except where there is evidence of a compromise or a user has forgotten the password.
Should you have any issues, you can contact the Wellcom service desk by email using service@wellcomww.com or by going to the service desk portal and clicking on ‘Report an issue’.