IoanaP.07520 (Customer) asked a question.
How to protect with MFA a specific action (same as the administrator dashboard is) ?
When an already authenticated user clicks the Admin button in Okta, she's challenged with a second factor (Oka Verify).
The same way, we would need in our application to challenge an already authenticated user to provide a second factor when he tries to perform a specific action, like accessing a protected endpoint.
Is it possible to do that through configuration or calling some Okta API?
Thanks!
Hi Ioana,
Are you talking about MFA when users click on a specific app they're assigned? If yes, I believe you can do this on the "Sign On" tab of the application setup. At the very bottom you can create a rule for Sign On.
Not really, I mean for an already authenticated user in my app. When he tries cu access a protected endpoint from the app, to challenge him with a factor. I think this could be the way:
https://developer.okta.com/docs/reference/api/factors/?_ga=2.101575686.688601831.1584351388-2007479813.1563867522#issue-a-push-factor-challenge