j5v7c (j5v7c) asked a question.
How do I disable specific MFA for ONE user only?
I have a Global Policy set to only use MFA with Okta Verify or Google Authenticator - no SMS-based 2FA - for every user. One particular user is having issue with his phone and cannot download Okta Verify or Google Authenticator app, effectively locking him out from Okta. So I would like to temporarily set SMS-based 2FA just for this one user, while maintaining non-SMS-based 2FA for every other users How can I do this? Basically this is what I am trying to achieve: 1). Global Policy set NOT to use SMS-based 2FA for all user (this is done) 2). For one user (say Joe) only, I would like to setup SMS-based 2FA. Everyone else still have to use non-SMS-based 2FA 3). Once Joe's phone is fixed, I want to enforce no SMS-based 2FA for him.
