Oakland County Information Security is modernizing and simplifying the way you log into your computer, the County network, applications, and multi-factor authentication (MFA), under a program called Oakland Sesame. Oakland Sesame will use the built-in Microsoft Windows Hello functionality on County-owned workstations and is intended to simplify the Windows login process, as well as subsequent MFAs in Okta-enabled applications.

For each County-owned workstation where Oakland Sesame will be used, a Windows Hello Camera and/or a Fingerprint Reader (built-in or external) MUST be installed for biometric authentication. County workstations without Windows Hello Camera or Fingerprint Reader can utilize a Windows Hello PIN. Refer to the Attachments section of this document to check device compatibility.

What is Oakland Sesame...

How does it work.....

Once these devices are in place you will need to enroll them in Oakland Sesame and then in Okta MFA. There are four options for enrollment from your County-owned workstation:
1. Using the built-in Windows Hello Camera (if computer hardware supports)
2. Using the built-in Windows Hello Fingerprint Reader (if computer hardware supports)
3. Using a Kensington Verikey External Fingerprint Reader (if computer does NOT support prior two)
4. Using Windows Hello PIN 

To purchase a Fingerprint Reader, the department's IT Liaison must create a change order selecting Add Personal Computing.Oakland Sesame as the category.
 

Setup Documents:
Oakland Sesame - Set Up Windows Hello Camera
Oakland Sesame - Set Up Windows Fingerprint Reader
Oakland Sesame - Check Device Compatibility
Oakland Sesame - Set Up Windows Hello PIN