Hello,

I'm looking at Okta logs and under the event type "core.user.factor.attempt_success" there is "debugContext"->"debugData"->"factor".

One of the values is  "PASSWORD_AS_FACTOR" and I don't see any documentation that explains what it means.

My best guess is: The factor field is populated with "PASSWORD_AS_FACTOR" when a user has been prompted for a factor in the past IE: daily, weekly, etc. but additional logins do not require the MFA workflow.

Can anyone confirm that is accurate? Or does this mean something else?

thx!