Unable to Reset the IdP Factor MFA when the Current IdP that was Tied to the IdP Factor MFA was Deactivated/Deleted
Last Updated:
Overview
This article addresses the situation in which Okta Admins are unable to reset an Identity Provider (IdP) factor when the previous IdP that was tied to the factor is deactivated or deleted. When they attempt to assign another IdP to the factor, the system gives the following error:
We found some errors. Please review the form and make corrections.
Applies To
- Okta Classic Engine
- IdP Factor
Cause
This issue is limited to the classic environment. It happens when the IdP tied to an IdP factor is deactivated or deleted prior to the factor being reassigned to another active IdP.
Following the steps below will reproduce the issue:
- Enable the IdP Factor under the Multifactor menu and assign it to an active IdP.
- Go to Identity Providers and deactivate/delete the IdP that was assigned to IdP Factor MFA.
- Going back to Multifactor and trying to assign the MFA to another active IdP throws an error that the previous IdP is not found.
Solution
- At present, if the IdP is DEACTIVATED, the Admin can still go and choose another IdP for the IdP Factor MFA. To solve the error, please follow these steps:
- Open the network tab on the browser. Attempt to set the IdP to the desired IdP Factor.
- The "settings" call fails with a 400 status. Right-click that call, copy it as a cURL request, and paste it into a text editor.
- Get the ID of the IdP that should be set. This can be done by inspecting the IdP Api Calls and finding the desired specific IdP. Copy that ID.
- Replace the IdP ID in the cURL call to the IdP that should be set.
- Paste the modified cURL request into the terminal and enter.
- Refresh the org, and the proper IdP should be set!
- If the IdP is DELETED, please open a case with Okta Support, referencing this article in the ticket.
- If this issue is encountered on an Okta Identity Engine (OIE) environment, please open a case with Okta Support, referencing this article in the ticket.
