End users do not see SMS as an option when performing Self-Service Unlock or Password Reset.
- Self-Service Account Unlock
- Self-Service Password Reset
In Okta Classic Engine
- On the Okta Admin Console, navigate to Security > Authentication.
- Edit the password policy that applies to the user with this error.
- Scroll down to Account Recovery.
- Enable the checkbox for SMS under Self-service recovery options.
- Click Update Policy.
In Okta Identity Engine
- If Legacy Access control needs to be used:
- On the Okta Admin Console, navigate to Security > Authenticators.
- Edit the password policy that applies to the user with this error.
- For Access control, select This rule (legacy), and for User can initiate recovery with, select Phone (SMS/Voice call).
-
- Click Update rule.
- If the Okta Account Management Policy needs to be used:
- On the Okta Admin Console, navigate to Security > Authenticators.
- Edit the password policy that applies to the user with this error.
- For Access control, select Authentication policy.
- Click Update rule.
- Navigate to Security > Authentication Policies, and click the Okta Account Management policy link.
- Using the Add rule button, define a new rule with the SMS factor.
- Update rule.
NOTE: If multiple factors are selected or assigned in the above policies in Okta Classic Engine and Okta Identity Engine, Okta handles all selected or assigned factors as an OR condition.
