GitLab IT - Mobile Device Onboarding

To be able to access applications behind Okta (e.g. Slack, GMail, Calendar, etc) on a mobile device; the device needs to be enrolled in Okta Verify, and a passkey needs to be saved on the device.

Table of Contents

  1. Okta Verify
  2. Mobile Passkey and YubiKey Setup

Okta Verify

These steps apply to Apple and Android devices

  1. Download the Okta Verify app from the App Store (Apple) / Play Store (Android)
  2. On your laptop, click on the
    Okta Verify icon at the top of your screen, near the battery indicator and select Open Okta Verify
  3. Click on your account, indicated by your name and email address
  4. Click Add Account to another device
  5. Verify your identity via Touch ID, and enable bluetooth if prompted
    1. You should now see a QR code on screen
  6. Ensure that bluetooth is enabled on your mobile device and that the device is on the same Wi-Fi network as the laptop
  7. Open the Okta Verify app on your mobile device
    1. If this is your first time using the app, select Add account from another device
    2. If you have used the app before, press the + button near the top of the screen
  8. On the Choose account type screen, select Organization
  9. Select Add account from another device followed by Scan QR code
  10. Scan the QR code on your laptop screen
  11. On your laptop, enter the 6-digit pin shown on the phone screen
  12. On your mobile device, enable biometric verification when prompted
  13. You can verify that your phone is successfully enrolled by going to Okta Settings and verifying that your phone is listed under Okta Verify

Okta Verify - Manual Setup

Use these steps in case the mobile app fails to connect to the laptop app or the laptop app is unavailable

  1. Ensure that you have an Okta passkey saved on your phone
  2. Download the Okta Verify app from the App Store (Apple) / Play Store (Android)
  3. Open the Okta Verify app on your mobile device
    1. If this is your first time using the app, select Get started, and continue until you get to the Choose account type screen
    2. If you have used the app before, press the + button near the top of the screen
  4. On the Choose account type screen, select Organization and then Skip
  5. Select No, sign in instead
  6. For Organization's sign-in URL, enter gitlab.okta.com
  7. Enter your Okta Username and Password and sign in
  8. Agree to the terms on screen and enable Touch ID

Mobile Passkey and Yubikey Setup

Adding a passkey to your mobile device will not give GitLab any access to any data on your phone. For more information, please see https://support.okta.com/help/s/article/Passkey-Management The steps below apply to both iOS and Android devices

  1. On your laptop, open Chrome and go to Okta Settings
  2. Next to Security Key or Biometric Authenticator, click Set up another
  3. Verify your identity via your preferred method (e.g. Touch ID, 1Password, etc)
  4. Click Set up followed by set up
    1. If the 1Password Save Passkey pop-up appears, click x
    2. If Use Touch ID to sign in? pop-up appears, click Cancel
  5. When asked to choose where to save your passkey for gitlab.okta.com, select Use a phone, tablet or security key - A QR code should now appear on screen
    1. YubiKey: Insert your YubiKey and press the button
    2. iOS:
      1. Ensure that iOS is up-to-date
      2. Ensure that you have the Password app installed and activated in your system settings
      3. Go to Settings > General > AutoFill & Passwords > ensure that Set Up Codes In should be using the Passwords app.
      4. Open the camera app and scan the QR code
      5. Select to save a passkey and follow the steps on your phone to save the passkey
    3. Android:
      1. Ensure that Android is up-to-date
      2. Open the Camera app OR Google Lens, depending on your device
      3. Scan the QR code and select the option to save a passkey to your Google account
      4. On Samsung devices, when prompted to Skip the QR code next time, select not now and proceed to save the passkey to your Google account. Please make sure that you save the passkey to Google’s passkey manager and not Samsung Passkey.

Need Help?

If you need further assistance with setting up your laptop please join our weekly onboarding call scheduled every Tuesday (Check your Calendar!) or reach out to us in Slack in the #it_help channel or via it-help@gitlab.com.