Note: For NIH users (anyone with an e-mail address that ends in "@mail.nih.gov") Okta has been directly connected to iTrust. You will not need to follow all the steps below. Once you have entered your email address on the CTRP Strap log-in screen, you will be directed to iTrust for authentication and redirected to the site once completed.

...

Okta has the same options for multifactor authentication as DUO, but you will need to set it up the first time you login to CTRP STRAP.

First-Time Login and Set-up Steps

Upon initial login to CTRP STRAP, you will be required to answer a few security related questions for identification verification purposes.  Detailed description of the steps that will be necessary are below. 

For existing CTRP STRAP users, the change in authentication service will have minor impact, as your username and password remain the same.

To access CTRP

...

:

1. Click Navigate to the following URLClick on the Acknowledge and Continue button on the  login screen.   
      
   
2. You will be taken to the Sign In screen. Please note that your username and password for CTRP STRAP remain the same.
   
   
3. Enter your email address. Then click the blue “Next” button. Note: If you are a NIH user, this will send you to iTrust. Follow that authentication to gain access to CTRP STRAP.
4. For non-NIH users, you will see a pop-up balloon indicating that you have not logged in with Okta before. (“This is the first time you are connecting to bioappdev.okta.com from this browser”.) Enter your password (same as previously used with Auth0/DUO) and click the blue “Sign In” button.
   
   
5. The Okta “Set up multifactor authentication” window appears next. There are 3 choices, each with a ‘Setup’ button directly under the description of the method:
   

   ●     Okta Verify - "Use a push notification sent to the mobile app."     

   ●     SMS Authentication - "Enter a single-use code sent to your mobile phone."

   ●     Voice Call Authentication - "Use a phone to authenticate by following voice instructions."

    

6. Choose the method you would like to use by clicking the ‘Setup’ button directly under your choice.
7. The following sections of this document define the steps needed for each of the different methods. Please see the section that correlates to your authentication choice. Note: You may choose more than one authentication method. For example, this provides you the opportunity to connect your account with your cell phone (Okta Verify app) and your office phone (Voice Call Authentication), even if they are two different numbers. Please see the section entitled “Two Factor Option: Multiple Methods”.
8. Once you have completed the setup for your chosen authentication method, click on the ‘Finish’ button.
9. Next, you will see a window asking you to choose a forgot password question. Please choose a question and enter your answer. This will only be used to verify your identity prior to starting the recover password process, if necessary.
   
   
10. Once you have completed the forgot password entry, you will be logged in to the application.
11. The next time you click on the Acknowledge and Continue button of CTRP STRAP, you will see the initial login screen again asking for your username. Once you enter your username and click “Next”, you will see a security image above the password textbox. This security image provides extra verification that you are accessing the correct page and account. This image is randomly selected when your account is activated but should be the same each time you enter your username. (If you ever see an unfamiliar image, do not enter your password. Please contact the CTRP Engineering Support mailbox, CTRP_Support@mail.nih.gov, for assistance.
    

    

...