Ginnie Mae to adopt Okta for MyGinnieMae multifactor authentication

Ginnie Mae officials said they plan to replace the current one-time PIN (OTP) multifactor authentication with an Okta-hosted, phishing-resistant solution across the MyGinnieMae portal to comply with federal Zero Trust requirements.

Laticia Jefferson, Director of Customer Experience at Ginnie Mae, said the change means users will continue to sign in with their MyGinnieMae username and password but will then see an Okta-hosted login screen where Okta will provide phishing‑resistant multifactor authentication. "We're going to be switching to Okta as the replacement for the one-time PIN," she said.

Jefferson said the implementation is planned for fall 2026 but indicated a target of August for the initial transition, and that Ginnie Mae will publish modernization bulletins with exact timing. She said Ginnie Mae will provide a 30-day adoption window after the announcement so users can set up Okta before the old PIN method is removed.

During Q&A, staff clarified several operational points. Bailey Brooks read chat responses stating that Okta will not affect RSA tokens; Okta's primary method will be passkey enablement and a secondary method will be an Okta verifier downloaded to a device. Ginnie Mae staff answered that once Okta is enabled, the PIN-by-email option will not remain available. Jefferson said organizations already using Okta will still need to set up a separate Okta account for MyGinnieMae and that enterprise single sign-on from an organization into MyGinnieMae (where an enterprise login automatically grants portal access) will not be provided under current Zero Trust rules.

Ginnie Mae encouraged users to watch the Modernization Initiatives page and subscribe to notifications for bulletins, training schedules, and step‑by‑step adoption guidance.