How Does the Factor Enrollment Policy Impact the Sign-On Policy
Nov 10, 2025
Okta Classic Engine
Multi-Factor Authentication
Overview
Applies To
- Okta Classic Engine
- Multi-Factor Authentication (MFA)
Solution
The term "Required" in a Factor Enrollment Policy does not directly affect the Sign-On Policy. It signifies that the user must enroll in the specified factor and have it included in their MFA profile. If a user lacks a required factor from their enrollment policy, they are unable to log in to an application requiring MFA until they enroll in the factor. The factor can then be used to fulfill MFA requirements. Users are not required to use the Required factor from the Factor Enrollment Policy, as they can authenticate with any Optional factor in which they are enrolled.
