The Okta Community is a robust hub for self-service so it’s common for customers to crowdsource and get peer-to-peer insight from our membership of thousands, including Okta expert employees and community moderators. 

This Multi-factor Authentication (MFA) question is a perfect example. 

In this Okta Community discussion, Eric says, “I found after 10 months a user who had not setup Okta Verify. We have Office365 federated to Okta, so I thought everyone who accesses emails, Teams, OneDrive would require Okta MFA … but it appears anyone running thick client before federation did not get prompted for Okta Verify until the password expired. I want to identify any other employees.

Simply put, can admins run a report of all employees who do not have Okta Verify Device enrolled?

The answer is yes. This can be achieved by downloading two different type of reports and cross-reference them into getting the required data. This can be done with Okta MFA Usage report and Okta Password Health report or using Rockstar addon.

Here’s How to Create the Report:

1. Navigate to Admin Dashboard-> Reports -> Reports
2. Download MFA usage report
3. Download Okta Password Health Report OR export a list all users via Okta Rockstar plugin

Once you have both databases you place them both in a spreadsheet and use VLOOKUP to compare and get a list of ones that don't have Okta Verify.

Watch & Learn: Using Workflows to Get Reports

Click here to view the related YouTube video on getting reports

More Like This

• Search for answers in the Questions forum or ask your own question
• Report Types
• Inside MFA Usage Reports
• Okta Password Health Report
• Using the Rockstar Browser Extension