User15723169660369288119 (Customer) asked a question.
Using a Question MFA challenge, is it possible to get the user's typed answer?
Hello,
We would like to MFA challenge a user during authentication to enter a short code that they would know very well. After entering this code, we would fetch the user's answer and verify that the code has been assigned to this user. If the username/password and code are successfully validated, the user is good to go. Is this possible using Okta's Factors? Are there any examples for implementation? Is there a unique id for the challenge and response that can be queried at a later time (i.e. audit trail investigation)?
Thank you for your help with these questions,
Mike
Are you setting this code and assigning it to them?
What you're describing sounds close to using a security question as a second factor which Okta handles out of box. A user would set this themselves though not an administrator and is very easy to set up and would only work for that user.
If you want to set a code and query some database to make sure it matches this would have to be done with some custom code and honestly would defeat the purpose of leveraging Okta for MFA.
As for the syslog you would see that there was a successful challenge for that user and their user name with associated date/time with other metadata for audit purposes.
Joe