Cardinal is not a system managed by CNU Information Technology Services. CNU provides a link within our systems to help users navigate to the Cardinal webpage. CNU ITS does not manage or maintain the accounts, webpages, or systems associated with Cardinal.

As of November 30, 2025, Cardinal is depreciating the SMS methods of multifactor authentication on Okta Verify. Please utilize alternate methods such as the authenticator app or a Yubikey.

_{Updated: Oct 29, 2025}

Log in to Cardinal

Enter MyCNU and click MyLinks. If you are not already logged in to MyCNU, you will be prompted to do so using your SSO credentials.

A list of links will appear below. In the list of links labeled Faculty and Staff Resources, click “Cardinal HCM and Timekeeping.” The cardinal webpage will open in a new tab in your browser.

Log in to Cardinal on your computer using your CNU email address and your Cardinal password. You will use your current multi-factor authentication method to do so.

Select “Manage Your Account”

Once you are into Cardinal, select “Manage Your Account”
This will take you to the virginia.okta.com site and show you your account information

Set up Okta Verify

Scroll down the page until you see the section titled Security Methods. Click “Set up” next to Okta Verify.
You will be asked to verify it is you with your Cardinal password and one of your current multi factor authentication methods.

Set up Okta Verify on your smartphone

Install the Application

Please use the QR codes below to download the appropriate applications for setting up and accessing Cardinal HCM and Timekeeping. These apps are required to complete your installation and ensure you have full access to the system’s features.

Apple

Google Play

In the App

Select“Organization” as your account type.

Skip the “Add Account from Another Device?” step.

Once it asks if you have a QR code click “Yes, Ready to Scan”

You will then scan the QR code shown on your computer. You will be asked to enable push notifications and face, fingerprint, or PIN authentication as part of the process. Once the account has been added, click “Done”.
For issues with setting up the Okta Verify app, please contact Cardinal Support.

Setting Up a Yubikey

For Yubikeys, signing into Cardinal will be a little more complicated: First, sign into Virginia.okta.com. The sign-in process which will prompt you for the user credentials and a security key.

Next, go to the Cardinal portal and repeat the login process there.
From the Manage Your Account page in Cardinal, Select “Security Key or Biometric Authenticator”.

You will need to verify your account using previously-established MFA methods. The image below shows the screen to trigger a push notification to the Okta app.

click “Set up” when prompted to start the setup process for a Security Key or Biometric Authenticator.

When prompted to choose where to save the passkey, select “Security key”. At this point, you will need to plug in your Yubikey

Click “Ok” until you ready a window where you are prompted to create a PIN for the Yubikey. Create a PIN of your choosing and click “Ok” again.

The remaining process will automatically setup the passkey. When you see “Passkey save”, you can click “Ok” to finish the process.

Signing In With Yubikey

Before signing into Cardinal,

After signing into Cardinal, the site will request that you insert your security key into a USB port.

Afterwards, you’ll be prompted to enter your four-digit PIN. Once you do, click “Ok” to complete the sign-in process.

Using Okta Verify/Security Keys for Cardinal