yrgwq (yrgwq) asked a question.
How can I enforce users to enter their MFA code?
I have a Multifactor policy that requires Okta Verify enabled. When a user with that policy signs in to Okta from a new browser session (I use Chrome's secret window), the user was not required to enter the TOTP MFA code and just could sign in with just username/password pair. I also want Okta to require TOTP MFA code when they request session tokens through Okta's Authentication API. How can I enforce users to enter the MFA code?
I solved this myself.
In admin console, go to Security > Authentication > Sign On. Edit the current policy or create a new one. Add a rule with Prompt for Factor checkbox is on and Every Time radio button is on. Then assign the Sign-on policy you created to users who you want to be asked for MFA code when signing in.
edit/new policy with prompt mode every time helps.