Hey folks,

We are using the (custom) okta hosted sign-in page and okta-sdk's for iOS and Android respectively. The apps act as applications that asks the user to login and provide authorization for a given resource and get a token via the authorization code flow.

In order to provide a self-recovery whenever a user forgot his password atleast a secret question is required.

This secret question and answer can be set when login into the custom url and accessing the user dashboard (which we would like to not get to at all, because the user dashboard is not styleable to our needs) . However we would like to prompt the user for this pair (question & answer) when he is in the authorization process to grant a code to the applications described above (in order to provide self-recovery from the get go)

So in short:

Is it possible to promt the user for secret quest + answer within the sign-in-widget at our custom url when he first signs in.

I am pretty sure we had this working before we swapped to a custom url. But I may be mistaken.

Thanks in advance for any help!

PS: I really hope I phrased my explanation at least a little bit understandable. Tell me if I didn't