Oct 15, 2025

Multi-Factor Authentication

Overview

The FIDO2(WebAuthn) factor is registered per domain in cases where there are two domains: a custom domain and the default one. The factor must be registered on both domains.

Applies To

Okta Identity Engine (OIE)
Multi-factor Authentication (MFA)
WebAuthn

Solution

Log in to https://[domain].okta.com or custom domain URL.
Enter the username and password, then Sign In.
The user will be prompted for MFA. Use any available MFA that is set to be optional, except YubiKey.
In the upper right corner, click Settings.
Under Security Methods > Security Key or Biometric, click Set up Another.
The user will then be prompted again to validate the account.
Select Setup.
The user will be prompted to create a passkey for the current URL they are logged into. Click Continue.
Additional Security Key or Biometric should now be added.