Any way to enforce Duo two factor during user account activation or when they complete setup? Skip to main content
https://support.okta.com/help/answers?id=906f0000000hzwziac&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fanswers
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Ask Search:
William GregorianWilliam Gregorian 

Any way to enforce Duo two factor during user account activation or when they complete setup?

I want to make sure that all users follow the setup to ensure compliance.
api-workday api-workdayapi-workday api-workday
Hi William,

I believe you can accomplish what you are describing with a Multifactor Policy.

With the Multifactor Policies you can define factors as required, optional or disabled and you can define an associated enrollment rule to require enrollment on logon or when challeneged based on their location.

It is described in length here
https://support.okta.com/help/articles/Knowledge_Article/Using-the-Multifactor-Page

-Matt
William GregorianWilliam Gregorian
So RTFM, but the problem is that I don't have a "multifactor" policy in our admin dashboard. Is that something that would be included by default? 
api-workday api-workdayapi-workday api-workday
Hi William, i know it is a new feature. I am under the impression that it is GA you may need to open a request to have it enabled for your Org.

I do not know if it is a feature that requires enhanced entitlements ($$) though.

A support request should provide clarity in that regard.

-Matt
Eric KarlinskyEric Karlinsky (Okta, Inc.)

William,

That feature is called Multifactor Enrollment Policy, and it's currently in Early Access (EA). So it is not on by default, but you can have Support enable it for you.

Eric