Step-Up Authentication Fails Automatically With an External Identity Provider in the Okta Admin Console
Last Updated:
Okta Classic Engine
Okta Identity Engine
Administration
Overview
Step-up authentication for protected actions fails immediately when an external Identity Provider (IdP) handles Okta Admin Console authentication, and the required Early Access feature remains disabled. The external IdP prompt appears or flashes, but the authentication process fails automatically despite the IdP settings having the "Trust claims from this identity provider" checkmark enabled.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Admin Console
- External Identity Provider (IdP)
Cause
The Early Access feature for external IdP re-authentication remains disabled in the Okta Admin Console.
Solution
How is the step-up authentication failure resolved?
Enable the Early Access feature for external IdP re-authentication in the Okta Admin Console by following these steps.
- Navigate to Settings, and then select Features.
- Locate the Support for re-authentication with an external IdP feature.
- Enable the feature.
