This article describes the steps for Okta end users to unlock their accounts without contacting an Okta Admin if the Self-Service Account Unlock feature is enabled.

• Okta Identity Engine (OIE)
• Security Question 
• Self-Service 

NOTE: This article does not describe the self-service account unlock settings for administrators. It is intended for end-user guidance only.

Follow the steps below:

1. The first time the user successfully signs on to Okta, they will be presented with a screen similar to this one, depending on the unlock account methods enabled by the Okta Admin:

2. If a user locks their account, they will see this page with the available recovery options, depending on the settings configured by the Okta Admin:

3. Additionally, the user may receive an email with a link to the page from above as soon as they lock their account if the automatic email was configured by the Admin.
4. Once the user enters their email or username and selects the desired account unlock option, instructions will be received to proceed with the account unlock based on what factor was selected. In this article, we'll use the email option, which is available by default.

The user will receive the following email:

5. When the user clicks the Unlock Account button, they may or may not be asked to answer their security question, depending on whether or not that's required by the administrators.

NOTE: If the user does not remember the answer to their security question, it will be necessary to contact the administrator.

6. Finally, the account will be unlocked, and the user will be able to sign in to Okta again: