<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D50Z00008G7UnuSAFOkta Classic EngineMulti-Factor AuthenticationAnswered2024-04-30T09:18:25.000Z2016-08-25T15:07:25.000Z2017-08-17T13:58:52.000Z
Prompt For Factor on okta sign in vs application based MF policies
I'm fairly new to Okta, so please pardon my ignorance.  I've a question surrounding MFA and I'm a bit confused.

 

When configuring an Okta Sign-on policy I see a check box labeled 'Prompt For Factor'.  

 

When configuring an application I see that I can set up an MFA policy for that particular app.

 

Here is my background info:  we have some apps on network and some apps on cloud.  I want any access to cloud based apps to have MFA as long as the user is not on my network.  Meaning, if I'm at my desk on the lan...I'll never get MFA prompt.  When working remote, I will get it for cloud apps.  Remote access to lan based apps is only available through VPN, so no need for MFA.

 

Question....why would I ever check the box labeled 'Prompt For Factor' when configuring an Okta Sign-on policy?

 

THANKS!


  • j5v7c (j5v7c)

    'Prompt For Factor' when configuring an Okta Sign-on policy is for the initial sign-on to the Okta portal page rather than per application.

     

    This you might want to do if you have Okta administrators, and you want them to use MFA when logging into Okta from the lan or off premise connection.
    Expand Post
This question is closed.
Loading
Prompt For Factor on okta sign in vs application based MF policies