Okta Users Are Unexpectedly Prompted for a Security Image or Question

Okta redirects end users to the Okta Welcome Page to select a security image and a forgotten password security question when an administrator enables optional user account fields. This redirect occurs even if end users access applications through a service provider. Administrators can resolve this unexpected prompt by modifying the optional user account fields in the Admin Console, or end users can complete the prompts to proceed.

• Okta Classic Engine
• Multi-Factor Authentication (MFA)
• Okta Welcome Page

An administrator enabled a security image or optional user account fields in the Okta customization settings.

How do end users complete the Okta Welcome Page prompts?

End users must select a security image and configure a forgotten password question on the Okta Welcome Page to proceed.

1. Navigate to https://<companyname>.okta.com/user/welcome.
2. Select a security image.
3. Click Create My Account.
   NOTE: Clicking Create My Account does not affect the current account settings or permissions.
4. Choose a forgot password question.
5. Enter the answer.
6. Click Create My Account.
   NOTE: This action does not disrupt any current account settings that might be in place.

How do administrators modify the optional user account fields?

Administrators can verify and modify the optional user account fields from the Admin Console to prevent these prompts.

1. From the Admin Console, navigate to Settings > Customization > Other > Optional User Account Fields.
2. Click Edit to make changes.
3. Click Save to save the changes.