Issue Resetting the Duo Security MFA Factor
Last Updated:
Okta Classic Engine
Multi-Factor Authentication
Okta Identity Engine
Overview
When an Admin resets the Duo Security MFA factor for an end-user in Okta, that user is not prompted to re-enroll the Duo factor.
Applies To
- Duo Security
- Multi-Factor Authentication (MFA)
Cause
Resetting a factor in an end user’s Okta profile does not reset their account in Duo Security. Likewise, if users remove Duo Security from Extra Verification in their End-User Settings page in Okta, the enrollment remains in Duo Security.
Solution
In this case, to allow the end user to enroll in a different Duo Security authentication method, delete their enrollment in the Duo Security Admin Panel. Otherwise, the end user is prompted with the same method they were using before the factor was reset or removed from Okta.
