> ## Documentation Index
> Fetch the complete documentation index at: https://talent.docs.mercor.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta Access

> Instructions for Accessing Mercor Work Tools through Okta Post-Offer Acceptance

<Note>
  Okta is the system Mercor uses to manage access to internal work tools. Upon acceptance of your contract, Okta provides you with access to project tools such as Slack and guarantees that all systems are secure and centrally managed.
</Note>

<Columns cols={2}>
  <Card title="Username = Email" icon="envelope">
    Your Okta email is consistently the personal email associated with your work.mercor.com account.
  </Card>

  <Card title="Slack access only" icon="slack">
    Currently, Okta manages Slack access exclusively, while access to other tools relies on previous credentials.
  </Card>

  <Card title="No separate Okta email" icon="xmark">
    You will not receive a separate email invitation. Access is granted through your contract.
  </Card>

  <Card title="Password and MFA resets" icon="rotate">
    If you lose access, return to the Okta step inside your contract and select “Forgot Password.” This resets both your password and your MFA (Passkey).
  </Card>
</Columns>

## Overview

* Your **Okta account** is created automatically upon initiating the contract acceptance process.
* Okta manages access to designated work applications.
* Your **Okta email** corresponds to your **personal email address** — the same one associated with your Mercor profile.
* If your platform email is updated later, your **Okta email will be updated as well**, and your **previous Okta password will remain valid**.

<Tip>
  If you have recently accepted a contract and have not yet been granted Slack access, or if you encounter the message "No available workspaces," please wait up to 24 hours for Slack to complete synchronization.
</Tip>

***

## How It Works

<div style={{ position:"relative",width:"100%",paddingBottom:"56.25%",height:0 }}>
  <iframe src="https://capture.navattic.com/cmk2o51pg000004js4gj3dtf1" data-navattic-demo-id="cmk2o51pg000004js4gj3dtf1" allow="fullscreen" style={{ position:"absolute",top:0,left:0,width:"100%",height:"100%",border:"none" }} />
</div>

<Steps>
  <Step title="Account Creation">
    Okta accounts are automatically generated upon acceptance of the offer during the <u>Okta Access</u> step. It is required to access the site using a computer or laptop in order to establish your account.
  </Step>

  <Step title="Login Access">
    To access your Okta dashboard, click on the Okta Access step again, then select 'Okta Dashboard.'  Your username corresponds to your personal Gmail account.
  </Step>

  <Step title="Access Revocation">
    Okta access is revoked solely upon the conclusion of all Mercor contracts associated with your account. Should one project complete while another remains active, your Okta access will remain in effect.
  </Step>

  <Step title="Slack Access">
    Migration to Okta will deactivate the previous Slack credentials. Please utilize your Okta login for access. Kindly note that workspace access may require several hours to become active.
  </Step>
</Steps>

***

## What is MFA?

Multi-Factor Authentication necessitates an additional verification method beyond your password. This safeguards that only you have access to your account and Mercor-related tools.

## What is FIDO2 / WebAuthn?

FIDO2 (WebAuthn) constitutes a robust authentication protocol endorsed by Okta. Unlike SMS codes or authenticator applications, FIDO2 employs a secure digital key stored locally on the user's device. This cryptographic key is called a **passkey**.

## What is a Passkey?

A passkey represents a cryptographic credential securely stored within a vault or password manager on your device. Authentication is achieved using methods such as fingerprint recognition, device PIN, facial recognition, or the device’s unlocking mechanism.

## Supported Passkey Managers

Passkeys must be stored in a manager that supports WebAuthn. Before configuring Okta, ensure that your preferred passkey manager is installed, active, and signed in.

<Columns cols={2}>
  <Card title="Chrome Password Manager (Recommended)" icon="chrome">
    The simplest method. Works on Windows, macOS, Android, and ChromeOS. Requires being logged into Chrome with your personal Gmail and having sync enabled.
  </Card>

  <Card title="iCloud Keychain (Apple)" icon="apple">
    Works across Safari, iPhone, iPad and macOS. Requires iCloud Keychain enabled and an Apple device screen lock / device password protection.
  </Card>

  <Card title="Windows Hello" icon="windows">
    Works on Windows PCs with facial recognition, fingerprint, or PIN configured.
  </Card>

  <Card title="Android Passkeys" icon="android">
    Stores passkeys directly in your Android device’s secure environment. Requires Google account login.
  </Card>

  <Card title="1Password Passkey Vault" icon="lock">
    Fully supports FIDO2/WebAuthn. Requires 1Password installed and signed in, with passkey storage enabled.
  </Card>

  <Card title="Other FIDO2-compatible managers" icon="key">
    Any system that supports WebAuthn and platform authentication (YubiKey, device TPM, etc.).
  </Card>
</Columns>

<Warning>
  You must already have your passkey manager configured on the device before starting the Okta step. Otherwise, FIDO2 enrollment will fail.
</Warning>

***

## Important Requirements Before Setup

### Use Google Chrome(Browser) for the setup

Chrome is the most stable and universal option for completing the Okta setup.

To ensure that Chrome can generate your passkey:

* Use Google Chrome (note that Firefox is not supported).
* Log in to Chrome using your Gmail account; otherwise, the Google Password Manager will not be activated.
* Complete the Okta setup on a computer, whether desktop or laptop.
* Avoid using incognito windows or private browsing modes.

If Chrome is not logged in or sync is disabled, the FIDO2 pop-up will not be displayed.

***

## Configuring Password and FIDO2 Passkey

### Using Chrome Browser (Recommended)

<video src="https://mintcdn.com/mercor-external/2tFF-YVpMvF32KHf/videos/Okta-Reset--Slack-access-for-Contractors---Chrome.mp4?fit=max&auto=format&n=2tFF-YVpMvF32KHf&q=85&s=44c2e3a88ad5ead1f13729aec47407af" controls data-path="videos/Okta-Reset--Slack-access-for-Contractors---Chrome.mp4" />

1. Open Google Chrome on your computer.
2. Confirm that you are logged into Chrome using your personal Gmail account.
3. Ensure sync is enabled.
4. Visit work.mercor.com.
5. Go to your contract, under your Contracts tab.
6. Click on the step: "Okta Account".
7. Select "Reset Password"
8. When prompted, click “Set up” under Security Key or Biometric Authenticator.
9. In the Chrome pop-up, select “Create Passkey.”
10. Chrome will save your passkey in Google Password Manager.

You are now ready to authenticate into your Okta Dashboard and access Slack.

### Using Safari Browser (Alternative)

<video src="https://mintcdn.com/mercor-external/2tFF-YVpMvF32KHf/videos/Okta-Reset--Slack-access-for-Contractors---Safari.mp4?fit=max&auto=format&n=2tFF-YVpMvF32KHf&q=85&s=53cfc22135f56fbd7482116c8321f71a" controls data-path="videos/Okta-Reset--Slack-access-for-Contractors---Safari.mp4" />

***

## Resetting Password and MFA

If you lose access to your device, get a new phone, or cannot authenticate using your passkey:

### Return to your contract → Okta Account step → Click “Forgot Password.”

This action:

* Resets your Okta password
* Resets your FIDO2 passkey
* Allows you to complete the full setup again

Passkeys cannot be transferred automatically between devices unless synced through a manager like Google Password Manager, iCloud Keychain, or 1Password.

***

# FAQs

<AccordionGroup>
  <Accordion title="I had Slack access, but now it’s gone.">
    This occurs when a project transitions to Okta-managed access. Your previous Slack credentials no longer work. Please log in using your Okta credentials.
  </Accordion>

  <Accordion title="How do I log into Slack on desktop or mobile?">
    1. On your phone, open the same browser you used on your computer during your initial Okta setup.
    2. Go to work.mercor.com.
    3. Open the Contracts tab and select the contract associated with the Slack workspace you want to access.
    4. Tap the Okta tile.
    5. Log in using the Okta credentials you previously created on your computer.
    6. Once you are logged into Okta, tap the Slack tile.
    7. You will be prompted to open or download the Slack mobile application. Open it, and your Mercor workspace will load automatically.
  </Accordion>

  <Accordion title="Can I use 1Password / iCloud Keychain / Windows Hello instead of Chrome Password Manager?">
    Yes. Any FIDO2-certified passkey manager is supported, but it must be configured on your device before you begin the Okta setup. Chrome Password Manager is recommended because it is the simplest and most compatible option.
  </Accordion>

  <Accordion title="Do I need to configure my passkey manager before setting up Okta?">
    Yes. If your device is not prepared for passkey creation, Okta cannot complete the FIDO2 setup, and enrollment will fail.
  </Accordion>

  <Accordion title="I switched devices and now I can’t authenticate. What do I do?">
    Go to your contract → Okta step → Reset Password. This resets both your password and your FIDO2 passkey so you can complete the setup again.
  </Accordion>

  <Accordion title="Why didn’t I receive an Okta invite email?">
    Okta access is created directly during your contract acceptance step. You will not receive an email invitation.
  </Accordion>

  <Accordion title="Can I use a different email for Okta?">
    No. Okta always uses the personal Gmail associated with your Mercor profile.
  </Accordion>

  <Accordion title="If I update my platform email, will Okta update automatically?">
    Yes. Your Okta login email address is updated automatically, while your current password remains valid.
  </Accordion>

  <Accordion title="I was offboarded. How do I regain access?">
    When you accept a new contract, your Okta access is automatically reactivated.
  </Accordion>

  <Accordion title="I see a 'Session Expired' message. What does this mean?">
    This happens when too much time passes or when switching devices during setup. Return to the Okta step inside your contract and restart the process.
  </Accordion>

  <Accordion title="I see a 'Browser not supported' message.">
    This occurs when using Firefox or in private browsing mode. Use Google Chrome, as Firefox does not support the Okta WebAuthn configuration used by Mercor.
  </Accordion>

  <Accordion title="No passkey pop-up appears when I try to set up my verification method.">
    This usually happens when Chrome is not prepared to create a passkey.\
    Please check the following:\
    • You are logged into Chrome with your Gmail\
    • Sync is enabled\
    • Your device has an active screen lock / device password protection\
    • You are not using incognito mode\
    • A passkey manager is configured\
    After checking, restart Chrome and try again.
  </Accordion>

  <Accordion title="I see 'Verification method failed to enroll.'">
    This occurs when your device’s passkey manager is inactive or improperly configured.\
    To resolve this:\
    • Enable a screen lock / password protection on your device\
    • Confirm that your device supports passkeys\
    • Ensure you are logged into your passkey manager (Google, iCloud, 1Password, etc.)\
    • Try again using Chrome
  </Accordion>

  <Accordion title="Slack shows 'No available workspaces.'">
    Slack may take up to 24 hours to synchronize after completing the Okta setup. Please wait and try again later.
  </Accordion>

  <Accordion title="Can I use Okta Verify as MFA?">
    The Okta Verify application is not currently enabled for use as a multi-factor authentication method within your contractor Okta account.
  </Accordion>

  <Accordion title="I'm receiving an error when trying to reset the password.">
    You are encountering this error because you are attempting to reset your password via the Okta portal. The appropriate procedure to reset your password is through the Okta Access step specified in your contract, located under the 'Contracts' tab on work.mercor.com.
  </Accordion>

  <Accordion title="How do I change my display name in Slack?">
    To modify your **display name** as displayed in Slack, please visit your Okta profile settings at:

    * [https://c-mercor.okta.com/enduser/settings](https://c-mercor.okta.com/enduser/settings)

    Any modifications made in this location will automatically synchronize with Slack. Kindly allow sufficient time for the updates to be reflected across all related tools.
  </Accordion>

  <Accordion title="My name isn't displaying correctly in Slack after Okta setup. What should I do?">
    If your first name, last name, or display name isn't syncing correctly from Okta to Slack, try editing the field in your Okta settings to ensure it contains **no special characters** — including emojis, ampersands (&), em dashes (—), or similar symbols.

    You can update your name at: [https://c-mercor.okta.com/enduser/settings](https://c-mercor.okta.com/enduser/settings)

    Once updated, changes should reflect in Slack shortly.
  </Accordion>

  <Accordion title="Why does my Slack name show '[EXP]' in front of it?">
    Expert Slack usernames are now **`automatically prefixed with [EXP]`** to help differentiate contractors from internal Mercor team members. This is part of our identity and workspace management policy — it cannot be manually removed or changed.
  </Accordion>

  <Accordion title="I am active on multiple projects. How do I switch between Slack workspaces?">
    If you have more than one active contract, you will appear in multiple Slack workspaces. To switch:

    1. Open Slack.
    2. Click the workspace switcher in the top-left corner.
    3. Select the workspace for the project you want to access.

    Use this menu anytime you need to move between project-specific channels and messages.

    <Frame>
      <img width="400" src="https://mintcdn.com/mercor-external/RZfIC1siTxPEZCrN/images/Okta/slackworkspaceokta.png?fit=max&auto=format&n=RZfIC1siTxPEZCrN&q=85&s=5865f795664e832d3166e4c7d83c9582" className="mx-auto" data-path="images/Okta/slackworkspaceokta.png" />
    </Frame>
  </Accordion>

  <Accordion title="Should I log into Okta using my @mercor.expert email?">
    No. Okta authentication always uses your personal email address associated with your Mercor work platform account.

    The @mercor.expert contractor email cannot be used to access Okta.
  </Accordion>
</AccordionGroup>