This article explains how to determine why a user is or is not prompted for Multi-Factor Authentication (MFA) during sign-in.

• Okta Identity Engine
• Multi-Factor Authentication (MFA)

Please follow these steps:

1. Log in to the Okta Admin Console and navigate to Security > Authenticators > Enrollment.

   • Required authenticators will prompt the user to enroll either during sign-in to the Okta Dashboard or when accessing an application that requires the authenticator.

2. Then, go to Security > Global Session Policy.

   • This is the org-wide requirement to log in.

3. Lastly, go to Security > Authentication Policies.

   • These are the requirements per application.

Related References

• About MFA Authenticators

• Global Session Policies

• Authentication Policies