Okta Access

Instructions for Accessing Mercor Work Tools through Okta Post-Offer Acceptance

Okta is the system Mercor uses to manage access to internal work tools. Upon acceptance of your contract, Okta provides you with access to project tools such as Slack and guarantees that all systems are secure and centrally managed.

Username = Email

Your Okta email is consistently the personal email associated with your work.mercor.com account.

Slack access only

Currently, Okta manages Slack access exclusively, while access to other tools relies on previous credentials.

No separate Okta email

You will not receive a separate email invitation. Access is granted through your contract.

Password and MFA resets

If you lose access, return to the Okta step inside your contract and select “Forgot Password.” This resets both your password and your MFA (Passkey).

Overview

• Your Okta account is created automatically upon initiating the contract acceptance process.
• Okta manages access to designated work applications — presently limited to Slack exclusively.
• Your Okta email corresponds to your personal Gmail address — the same one associated with your Mercor profile.
• If your platform email is updated later, your Okta email will be updated as well, and your previous Okta password will remain valid.

If you have recently accepted a contract and have not yet been granted Slack access, or if you encounter the message “No available workspaces,” please wait up to 24 hours for Slack to complete synchronization.

---

How It Works

1. Account Creation

   Okta accounts are automatically generated upon acceptance of the offer during the Okta Access step. It is required to access the site using a computer or laptop in order to establish your account.

2. Login Access

   To access your Okta dashboard, click on the Okta Access step again, then select ‘Okta Dashboard.’ Your username corresponds to your personal Gmail account.

3. Access Revocation

   Okta access is revoked solely upon the conclusion of all Mercor contracts associated with your account. Should one project complete while another remains active, your Okta access will remain in effect.

4. Slack Access

   Migration to Okta will deactivate the previous Slack credentials. Please utilize your Okta login for access. Kindly note that workspace access may require several hours to become active.

---

What is MFA?

Multi-Factor Authentication necessitates an additional verification method beyond your password. This safeguards that only you have access to your account and Mercor-related tools.

What is FIDO2 / WebAuthn?

FIDO2 (WebAuthn) constitutes a robust authentication protocol endorsed by Okta. Unlike SMS codes or authenticator applications, FIDO2 employs a secure digital key stored locally on the user’s device. This cryptographic key is called a passkey.

What is a Passkey?

A passkey represents a cryptographic credential securely stored within a vault or password manager on your device. Authentication is achieved using methods such as fingerprint recognition, device PIN, facial recognition, or the device’s unlocking mechanism.

Supported Passkey Managers

Passkeys must be stored in a manager that supports WebAuthn. Before configuring Okta, ensure that your preferred passkey manager is installed, active, and signed in.

Chrome Password Manager (Recommended)

The simplest method. Works on Windows, macOS, Android, and ChromeOS. Requires being logged into Chrome with your personal Gmail and having sync enabled.

iCloud Keychain (Apple)

Works across Safari, iPhone, iPad and macOS. Requires iCloud Keychain enabled and an Apple device screen lock.

Windows Hello

Works on Windows PCs with facial recognition, fingerprint, or PIN configured.

Android Passkeys

Stores passkeys directly in your Android device’s secure environment. Requires Google account login.

1Password Passkey Vault

Fully supports FIDO2/WebAuthn. Requires 1Password installed and signed in, with passkey storage enabled.

Other FIDO2-compatible managers

Any system that supports WebAuthn and platform authentication (YubiKey, device TPM, etc.).

You must already have your passkey manager configured on the device before starting the Okta step. Otherwise, FIDO2 enrollment will fail.

---

Important Requirements Before Setup

Use Google Chrome(Browser) for the setup

Chrome is the most stable and universal option for completing the Okta setup.

To ensure that Chrome can generate your passkey:

• Use Google Chrome (note that Firefox is not supported).
• Log in to Chrome using your Gmail account; otherwise, the Google Password Manager will not be activated.
• Complete the Okta setup on a computer, whether desktop or laptop.
• Avoid using incognito windows or private browsing modes.

If Chrome is not logged in or sync is disabled, the FIDO2 pop-up will not be displayed.

---

Configuring Password and FIDO2 Passkey (Chrome)

1. Open Google Chrome on your computer.
2. Confirm that you are logged into Chrome using your personal Gmail account.
3. Ensure sync is enabled.
4. Visit work.mercor.com.
5. Go to your contract, under your Contracts tab.
6. Click on the step: “Okta Account”.
7. Select “Reset Password”
8. When prompted, click “Set up” under Security Key or Biometric Authenticator.
9. In the Chrome pop-up, select “Create Passkey.”
10. Chrome will save your passkey in Google Password Manager.

You are now ready to authenticate into your Okta Dashboard and access Slack.

---

Resetting Password and MFA

If you lose access to your device, get a new phone, or cannot authenticate using your passkey:

Return to your contract → Okta Account step → Click “Forgot Password.”

This action:

• Resets your Okta password
• Resets your FIDO2 passkey
• Allows you to complete the full setup again

Passkeys cannot be transferred automatically between devices unless synced through a manager like Google Password Manager, iCloud Keychain, or 1Password.

---

FAQs

I had Slack access, but now it’s gone.

This occurs when a project transitions to Okta-managed access. Your previous Slack credentials no longer work. Please log in using your Okta credentials.

How do I log into Slack on desktop or mobile?

1. Open the Slack app
2. Enter your Mercor Gmail and select “Sign in with email.”
3. Enter the verification code sent to your email
4. If required, choose SSO/SAML and authenticate through Okta

Can I use 1Password / iCloud Keychain / Windows Hello instead of Chrome Password Manager?

Yes. Any FIDO2-certified passkey manager is supported, but it must be configured on your device before you begin the Okta setup. Chrome Password Manager is recommended because it is the simplest and most compatible option.

Do I need to configure my passkey manager before setting up Okta?

Yes. If your device is not prepared for passkey creation, Okta cannot complete the FIDO2 setup, and enrollment will fail.

I switched devices and now I can’t authenticate. What do I do?

Go to your contract → Okta step → Reset Password. This resets both your password and your FIDO2 passkey so you can complete the setup again.

Why didn’t I receive an Okta invite email?

Okta access is created directly during your contract acceptance step. You will not receive an email invitation.

Can I use a different email for Okta?

No. Okta always uses the personal Gmail associated with your Mercor profile.

If I update my platform email, will Okta update automatically?

Yes. Your Okta login email address is updated automatically, while your current password remains valid.

I was offboarded. How do I regain access?

When you accept a new contract, your Okta access is automatically reactivated.

I see a 'Session Expired' message. What does this mean?

This happens when too much time passes or when switching devices during setup. Return to the Okta step inside your contract and restart the process.

I see a 'Browser not supported' message.

This occurs when using Firefox or in private browsing mode. Use Google Chrome, as Firefox does not support the Okta WebAuthn configuration used by Mercor.

No passkey pop-up appears when I try to set up my verification method.

This usually happens when Chrome is not prepared to create a passkey.
Please check the following:
• You are logged into Chrome with your Gmail
• Sync is enabled
• Your device has an active screen lock
• You are not using incognito mode
• A passkey manager is configured
After checking, restart Chrome and try again.

I see 'Verification method failed to enroll.'

This occurs when your device’s passkey manager is inactive or improperly configured.
To resolve this:
• Enable a screen lock on your device
• Confirm that your device supports passkeys
• Ensure you are logged into your passkey manager (Google, iCloud, 1Password, etc.)
• Try again using Chrome

Slack shows 'No available workspaces.'

Slack may take up to 24 hours to synchronize after completing the Okta setup. Please wait and try again later.

Can I use Okta Verify as MFA?

The Okta Verify application is not currently enabled for use as a multi-factor authentication method within your contractor Okta account.

I'm receiving an error when trying to reset the password.

You are encountering this error because you are attempting to reset your password via the Okta portal. The appropriate procedure to reset your password is through the Okta Access step specified in your contract, located under the ‘Contracts’ tab on work.mercor.com.