This article outlines the procedure for implementing a mandatory Security Question enrollment process for new users upon initial authentication. The procedure can be executed even if the Security Question enrollment is set to Disabled in the Factor Enrollment Policy by utilizing the Password Policy.

• Okta Identity Engine (OIE)
• Password Policy
• Self-service account recovery
• Multi-factor Authentication (MFA)

1. Log in to the Okta Admin Console.
2. Go to the Security tab, and then click on the Authenticators tab.
3. Click Actions and then Edit on the Password authenticator.

4. Add New Password Policy or edit an existing policy that should apply the security question.
5. Add a Rule to the policy.
6. In the Additional Verification is section, select the Only Security Question option.

Related References

• Self-service account recovery