Enrollment Limits for FIDO2, YubiKey, and Smart Card Authenticators for a User Account
Jan 5, 2026
Okta Classic Engine
Okta Identity Engine
Multi-Factor Authentication
Overview
This article clarifies the maximum number of authenticators that a user can enroll on an account.
Applies To
- Authenticators
- Multi-Factor Authentication (MFA)
Solution
-
Users can enroll up to 10 FIDO2 (WebAuthn) authenticators per account.
-
Users can enroll one OTP YubiKey per account.
-
Users can enroll one smart card authenticator per user.
-
NOTE: Multiple smart card Identity Providers (IdPs) can be attached to the smart card authenticator.
-
