JeffW.31511 (Customer) asked a question.
Org2Org Attributes
I have configured a Org2Org configuration between two Okta preview environments. We will be will be enforcing MFA at the Spoke (IdP) but I am looking for a way that Okta can dynamically include in the SAML Assertion that the MFA process was successful thus preventing the by pass of MFA. As I integrate business partners with and without Okta this would be a great control to make sure they are doing the proper thing. Even better would be a token that the Hub (SP) could validate against the IdP. I would also need a method for the Hub (SP) to read and act on the information in the assertion.
I agree with Gabriel. For something like this to work, there would have to be an Okta profile attribute that gets set every time you log in, to indicate if MFA was used, so it could be included in the SAML assertion to the other org.
Your concern seems to be reporting on someone accessing the hub org without MFA, but that's a concern you need to address in the org where MFA is configured. When properly configured, bypassing MFA should not be possible.
I'm just a customer like you, so I don't have any inside information, but some sort of notification may be possible in the future, as Okta expands the web hooks features.