Factor Sequencing is a feature that allows end-users to sign into their org by authenticating with a series of MFA factors in place of a standard password. Admins could sequence one or more factors in an authentication flow. Factor Sequencing as demonstrated in this article, is only available in Okta Classic Engine.
In Okta Identity Engine (OIE), Factor Sequencing has similarly been reintroduced as the Authentication method chain.
NOTE: Factor Sequencing is no longer available for new activations on Okta Classic Engine. These instructions are intended only for legacy activations.
- Okta Classic Engine
- Multi-factor Authentication
- Passwordless Authentication
Check out the video below for information about how to configure Factor Sequencing in Okta Classic:
Check out the below steps for information about how to configure Factor Sequencing in the Okta Classic.
Steps to follow to define the MFA factor sequence in Okta:
-
Log in to the Okta Admin Console
-
Navigate to the Security tab from the top menu and select the Authentication option from the dropdown.
-
Click on the Sign On tab, which will open the Sign-On Policy settings.
-
Either select an existing policy or create a new one for end users.
-
After selecting the policy, scroll down to the Authentication section.
-
Under Authentication, define the factor sequence that Okta will use for multi-factor authentication (MFA).
-
Add or remove factors as per the organization's security requirements.
-
To add a new factor, click on the Add Factor button and select the type of factor desired, such as Okta Verify, SMS, Google Authenticator, or others.
-
Also, the order of the factors to determine the sequence in which they will be used for authentication.
-
Once the factor sequence has been defined, click on the Save button to apply the changes.
