Is it possible to disable security challenge question?

j5v7c (j5v7c) asked a question.

Given that we're using Duo two-factor, it doesn't make sense to have a security challenge question. Is there a way to disable?

Raja Nejem - 1 (Okta, Inc.)
Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:27 AM
Hello William,

Okta has a security challenge question for password resets. The security question is prompted when users reset their passwords.

Okta also has a security question as a form of MFA. Make sure it is not turned as a form of MFA.
Expand Post
f928k (f928k)
Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:29 AM
I think this should be a configurable option - no one remembers the answers to those questions and they end up requesting IT reset their password. It defeats the purpose when you're already using email or SMS for resets.
Expand Post
aadei (aadei)
Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:27 AM
There is another issue with this. When your first login is to a SAML Office 365 tenant, the window popping up when starting a Office app does so without a scroll bar, so users do not see that there are 3 questions. You can tab through the options, but this is REALLY user unfriendly.
Expand Post
j5v7c (j5v7c)
10 years ago
Wrong thread ;)
Expand Post
jbcml (jbcml)
8 years ago
Same person, different company. Two years later, facing the same challenge (no pun). Security Challenges are obsolete, and even then, we have other technical means to reset passwords without having to force people to remember KBAs. I encourage Okta to rethink this feature.
Expand Post