This article describes the feature that automatically sends an Okta Verify push notification for Multi-Factor Authentication (MFA) without requiring the user to select the Send Push option.
- Authentication
- Multi-Factor Authentication (MFA)
- Okta Identity Engine (OIE)
- Okta Classic Engine
Please follow the steps below or the video.
The Okta Verify Auto Push feature is a General Availability (GA) feature for MFA and Adaptive MFA SKUs. If this feature is not enabled, a case must be opened with Okta Support.
The required steps differ between the Okta Classic Engine and the Okta Identity Engine.
Okta Classic Engine
-
Go to the Okta Admin Console and select Security > Multifactor.
-
Select the Factor Types tab.
-
In the Okta Verify section, click Edit.
-
Select the Enable Push Notification checkbox.
Okta Identity Engine
-
Go to the Okta Admin Console and select Security > Authenticators.
-
Select the Setup tab.
-
On the Okta Verify authenticator, select Actions > Edit.
-
Select the Push Notification (Android and iOS only) checkbox.
After this feature is enabled, users must select Send push automatically during their next login. Subsequent logins will not prompt for the Send Push action.
NOTE: Okta Verify must be enabled as an MFA factor for the organization and enrolled on the user's device.
NOTE: If users are behind a firewall that restricts internet traffic, Okta Verify push notifications may fail. To allow connectivity with Google Firebase Cloud Messaging, open ports 5228, 5229, and 5230 on the firewalls. The firewall must accept outgoing connections to all IP addresses in the IP blocks listed in Google's ASN of 15169.
NOTE: If the Push Notification option is not available in the Edit section for Okta Verify, certain feature flags are not enabled for the organization. To resolve this issue, open a case with Okta Support.
Related References
