Allow Users to Self-Enroll into MFA with RADIUS App Inline Enrollment
Last Updated:
Okta Classic Engine
Multi-Factor Authentication
Okta Identity Engine
Overview
This article provides information regarding the Inline MFA enrollment option for the RADIUS application Advanced RADIUS Settings.
This will allow users to enroll in the allowed authenticators during the login flow when accessing the VPN.
Applies To
- RADIUS
- Enrollment policy
- Multi-Factor Authentication (MFA)
Solution
In this video, Frederico Hakamine shows how to enhance user experience with Okta's new RADIUS App Inline Enrollment (RAIE) feature.
- RADIUS App Inline Enrollment allows any user to enroll in MFA factors.
- Users can enroll through their Okta-integrated VPN.
Best Practices
- Establish an enrollment policy with MFA before implementing the RADIUS App Inline Enrollment feature.
- Use the MFA factors that are supported by the RADIUS App:
- Okta Verify with Push
- SMS
- Voice Call factor
Troubleshooting Tip
- After enabling this feature, use the RADIUS App Model in Okta and create an App using the OIN.
