Can you use "OR" logic when setting up MFA? Skip to main content
https://support.okta.com/help/answers?id=9062a000000bm62qaa&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fanswers
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Ask Search:
Sam JohnsonSam Johnson 

Can you use "OR" logic when setting up MFA?

For example, text message and Google Authenticator are options. Currenlty you can choose "optional", "required", or "disabled". Is there any way to set up two MFA options so that users can choose one or the other, but must choose one?

I could setup text message as optional and GA as optional, but then they could bypass both. Or I could set one of the two up as required and the other optional, but then the user doesn't have a choice on which one they want to use. 
Anyway to get both be an option but only one required (which the user chooses)?

Jim MolléJim Mollé (Okta, Inc.)
Hi Sam... when you set up MFA, providing SMS and GA as your two "optional" options, so long as no option is set as "required" the end user must select one of the two optional. In other words, even though you have them set as optional, the MFA enrollment will force the user to select at least 1 of the 2 optional options.
Sam JohnsonSam Johnson
Okay awesome! I figured since both were optional then they wouldn't have to choose one and could just bypass. This is good to know! Thanks!