<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
System Status
Announcements
Announcements
Search
Search
Select Language
Knowledge Base
Knowledge Articles
Support Videos ↗
Documentation
Product Documentation ↗
Developer Documentation ↗
Product Release Notes ↗
Community
Events & Webinars
Okta Ideas ↗
Resources
Product Hub
Customer Success Hub
Product Release Update
Learning
Okta Learning ↗
Get Support
Open a Case
HomeCommunityForum
0D50Z00008G7UuPSAVOkta Classic EngineMulti-Factor AuthenticationAnswered2024-04-30T09:18:25.000Z2015-12-10T15:57:37.000Z2017-04-13T15:53:19.000Z

j5v7c (j5v7c) asked a question.

Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:19 AM
MFA Setup - setting up the factor before requiring MFA
Hi All,

I'd like to have users setup a second factor (in this case a security question) before requiring they use MFA to authenticate to Okta.  Right now without MFA enabled they cannot setup a security question (doesn't show in their profile).  If I turn on MFA all at once everyone would be required to setup a question immediately and I like to give people more runway than that.  Is there a way to get this to work?

 

Thanks!

  • 3 answers
  • 879 views

  • eric.karlinsky1.4147731941881877E12 (Okta, Inc.)

    Hey John,

     

    Our MFA Enrollment policy type is currently in EA, which means Support can turn it on for you. This policy give you much more granuarity around when users are asked to enroll a second factor and which methods the end user is permitted to set up. I think this could address this issue.

     

    Thanks,

    Eric
    Expand Post

  • j5v7c (j5v7c)

    Would it be possible to enroll their factors without requiring they actually use them at the time?

  • svcV.75126 (Customer)

    Hi John,

     

    One way to do this that doesn't required the new enrollment policy. 
    • Enable MFA Factors but don't required them for Okta Sign On
    • Publish a Bookmark app and set an application Sign On Polciy for that application to require MFA
    • Assign that application to your users and instruct them to visit the app to force the enrollment sequence
     The destination could be a landing page that congratulates your users on their enrollment and usage of MFA or well anything for that matter.

     

    -Matt
    Expand Post
This question is closed.
Loading
MFA Setup - setting up the factor before requiring MFA