...

1. Click on the Acknowledge and Continue button on the  login screen.        
      
   Image Added
2. You will be taken to the Sign In screen. Please note that your username and password for CTRP STRAP remain the same.
   
   Image Added
3. Enter your email address. Then click the blue “Next” button. Note: If you are a NIH user, this will send you to iTrust. Follow that authentication to gain access to CTRP STRAP.
4. For non-NIH users, you will see a pop-up balloon indicating that you have not logged in with Okta before. (“This is the first time you are connecting to bioappdev.okta.com from this browser”.) Enter your password (same as previously used with Auth0/DUO) and click the blue “Sign In” button.
   
   Image Added
5. The Okta “Set up multifactor authentication” window appears next. There are 3 choices, each with a ‘Setup’ button directly under the description of the method:
   

   ●         

   ●     

   ●       

   Image Added 

6. Choose the method you would like to use by clicking the ‘Setup’ button directly under your choice.
7. The following sections of this document define the steps needed for each of the different methods. Please see the section that correlates to your authentication choice. Note: You may choose more than one authentication method. For example, this provides you the opportunity to connect your account with your cell phone (Okta Verify app) and your office phone (Voice Call Authentication), even if they are two different numbers. Please see the section entitled “Two Factor Option: Multiple Methods”.
8. Once you have completed the setup for your chosen authentication method, click on the ‘Finish’ button.
9. Next, you will see a window asking you to choose a forgot password question. Please choose a question and enter your answer. This will only be used to verify your identity prior to starting the recover password process, if necessary.
   
   Image Added
10. Once you have completed the forgot password entry, you will be logged in to the application.
11. The next time you click on the Acknowledge and Continue button of CTRP STRAP, you will see the initial login screen again asking for your username. Once you enter your username and click “Next”, you will see a security image above the password textbox. This security image provides extra verification that you are accessing the correct page and account. This image is randomly selected when your account is activated but should be the same each time you enter your username. (If you ever see an unfamiliar image, do not enter your password. Please contact the CTRP Engineering Support mailbox, CTRP_Support@mail.nih.gov, for assistance.
    

    Image Added

Two Factor Method: Okta Verify

1. Clicking on this choice brings up the “Setup Okta Verify” window. In this window, “Select your device type” by clicking the icon that matches the brand of mobile phone that you will be using. (If you would like to go back and choose a different authentication method, click on “Back to factor list” located in the bottom left-hand corner of the center window.)

   Image Added
   

2. When you click on the brand icon, the window will expand at the bottom to display instructions to “Install Okta Verify”.

   Image Added
   

3. Okta Verify is a mobile app that needs to be downloaded to your cell phone. The window contains a link to your cell phone brand’s app store page for Okta Verify. This will allow you to easily identify Okta Verify in your app store  to download on your cell phone.

   Image Added
   

4. Once the app is downloaded, click on the blue “Next” button on your computer and tap on the “Add Account” button in your cell phone app. (If asked, allow the app to access your cell phone camera and allow it to send push notifications).

5. The Okta app will open a camera screen, and your computer screen will display a QR code (square-shaped barcode).

   Image Added
   

6. Point your cell phone towards your computer screen and align the cell phone camera display with the square of the QR code.

7. The Okta Verify app will scan the QR code and connect your cell phone to your Okta account. You will see a new entry in the connections list in your cell phone app.

8. On your computer, you will be directed back to the “Setup Multifactor Authentication” screen.

9. While initially you will be logged into your account following these steps, the next time you log into your account, you will be using a “push” to authenticate. Please take note of the following steps:

        ●     When you enter your username and password, you will see a window for Okta Verify with a button to “Send Push”. Click on this button and a “push” pop-up alert will be sent to the app on your mobile phone asking you to approve the connection.

        ●     Tap on the “Approve” button to authenticate.

        ●     Following the authentication, the application will load.

        ●     The next time you log in to the application, an Okta Verify window will appear asking whether to send a push to the phone number on record. 

   ●     Click to proceed with the push, then tap on “Approve” in the popup alert from the Okta Verify app.

   
   

10. Return to Step 8 in “First-Time Login Steps” to finish setup.

...

1. Clicking on this choice brings up a window that allows the user to set up their account to “Receive a code via SMS to authenticate”.
2. Use the dropdown picklist to choose the country of your location (United States is selected by default). The choice of country automatically populates the appropriate country code prefix for the Phone number text box.
3. Enter the phone number of the mobile phone that you would like to use and then click on the blue “Send code” button. (If you would like to go back and choose a different authentication method, click “Back to factor list” located in the bottom left-hand corner of the center window.)
   
   Image Added
   
4. Next, a text message with a code will be sent to the phone number provided, and you will see a text box on the screen.
5. Enter the code in the textbox and submit it.
6. Following the authentication, CTRP STRAP will load.
7. The next time you login to CTRP STRAP, a SMS Authentication window will appear asking to approve the sending of a text message to the number provided (With the exception of the last 4 digits, the number will be masked).
8. Check your cell phone for the text message, then enter the code received on your phone into the textbox on the screen.
9. Return to Step 8 in “First-Time Login Steps” to finish setup.

...