This article addresses the Multi-Factor Authentication (MFA) challenge behavior for authentication rules where the "Re-authentication frequency" is set to a specific time interval.
- Authentication Policy
- Multi-Factor Authentication (MFA)
- Okta Identity Engine (OIE)
The Multi-Factor Authentication challenge for time-based re-authentication is shared across all challenges with the same Okta Session. This means every authentication challenge will reset the timer for all the time-based authentication rules.
As an example, if application A has the authentication rule set to re-authenticate frequency set at every login and application B has the re-authenticate frequency set at every 2 hours, every time the user accesses application A and performs the challenge that resets the 2 hours re-authenticate frequency for application B if the user is using the same Okta session.
