Thank you for posting your question on the Okta Community. There are two levels in which a user can be forced to be prompted for MFA. One is on an organisation level - when user signs into Okta and another is at an application level - while user access the application in Okta. Please refer to the following documentation to setup MFA for your organization or application using appropriate Sign on policies:

Multi Factor Authentication: https://help.okta.com/en/prod/Content/Topics/Security/MFA.htm

Application Level Multifactor Authentication: https://help.okta.com/en/prod/Content/Topics/Security/MFA_App_Level.htm

You can assign users to an application both at an individual level or a group level. You can use Individual assignment, if you are assigning only a few users to the application. Group based assignments are preferred for bulk assignments and make it easier for Administrator to manage roles, licences (if any) and so on at a group level. You can refer to the following documentation on the advantages of using a Group Assignment.

https://help.okta.com/en/prod/Content/Topics/Directory/Directory_Groups.htm#Using_Groups

You can always open up a case with Okta Support if further assistance is required with any of these features and we will be glad to assist you.

Hello Kenneth,

Thanks for posting your inquiry in Okta Community Portal.

If you receive a great answer to your question(s), please help readers find it by marking it the best answer. Hover over the answer and click "Best Answer."

Thank you,

Mike Davie

Okta Help Center