Okta Users Prompted For Phone Number After Launching Office 365 Applications
Last Updated:
Single Sign-On
Okta Classic Engine
Okta Identity Engine
Overview
Office 365 prompts users to set up a phone number and email address after launching an application from the Okta End-User Dashboard because Azure Active Directory has the Self Service Password Reset option enabled for federated users. Disable the Self Service Password Reset option in the Azure portal to resolve this issue. Users still see this prompt even if the steps to use Okta Multi-Factor Authentication (MFA) for Azure Active Directory for automatically federated domains complete successfully. After launching an Office 365 application from the Okta End-User Dashboard, the application displays a prompt requesting additional information.
After selecting Next, the application displays a prompt requiring the user to enter a phone number, even though the policies do not require MFA in Office 365.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Office 365
- Single Sign-On (SSO)
Cause
Azure Active Directory has the Self Service Password Reset option enabled for federated users.
Solution
How do administrators disable the Self Service Password Reset option?
Navigate to the Azure Active Directory properties in the Azure portal and disable the Self Service Password Reset option.
- Sign in to the Azure portal and navigate to Azure Active Directory.
- Navigate to Protection > Password reset > Properties.
- Select None under Self service password reset enabled.
- Select Save.
