Is Configuring MFA by Group then Time Periods on the Roadmap? Skip to main content
https://support.okta.com/help/answers?id=906f0000000hztgiac&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fanswers
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Ask Search:
Jannetta HamlinJannetta Hamlin 

Is Configuring MFA by Group then Time Periods on the Roadmap?

We would like to restrict a certain group of users from using Okta outside of a specified time frame.  Is this on the Roadmap?
Eric KarlinskyEric Karlinsky (Okta, Inc.)
Hi Jannetta,

It's part of the plan, yes. Immediately, we are focused on geographical constraints for sign-on policies (Multiple IP Zones, Location, Country). After those features are delivered in the beginnig of this year, time frames are a frequently requested feature that we plan to take on.

That said, Okta's flexible Policy Framework may be able to mitigate your risk today. What is the use case that's driving this request? Would on- and off-prem policies help at all?

Thanks,
Eric
Jannetta HamlinJannetta Hamlin

Hi Eric,

We are happy that this is being looked at.  Do you have a general time frame that it could possibly be available?  In the meantime, if there is a work around, that would be wonderful.

One of the use cases that we are looking at is..To use groups for the users to have the following access:

  • All Salaried employees can access anytime/anywhere. 
  • All hourly employees are to access Okta between the hours of 6am to 6pm Monday through Saturday only, on or off network.  

Another one is using jobcodes to determine if they can access on or off network then on top of that have a time frame that they can access.

  • All Assistant Managers can access Okta On or OffNetwork from 6am to 6pm
  • All other hourly employee would be able to only access Okta OnNetwork between 6am and 6pm.
Does this make sense?

Thanks,
Jannetta
Eric KarlinskyEric Karlinsky (Okta, Inc.)

Hey Jannetta,

There are some API/script-related workarounds that you could implement, but they're not ideal. If you'd like to discuss them, I'm happy to do that.  

I have a few questions about the timeframe request though. Is the 6am to 6pm timframe based on a certain time zone, is it GMT-based, or is it based on the end user's local time?

Thanks,
Eric

Jannetta HamlinJannetta Hamlin
Hi Eric,

We would like to discuss a workaround that we could use until Okta has an option.  

The time frame question is a great question.  We will need to figure this out since our user profiles do not have the time zones included.  We have store numbers but not the time zone they are in.  I think we would have to figure something out with GMT. I would like to discuss this a further with you.

Do you have time early next week that my manager and I could visit with you?

Thanks, 
Jannetta