zjicp (zjicp) asked a question.
Self Service SMS and Voice Calls
I had a few questions related to self service pass resets.
- We have users in the UK who'd like to use this feature. Upon entering their number they were prompted that only US and Canada numbers are accepted. Is this true?
- I set up a test self service policy. I simulated a user lockout after x attempts. Upon getting the email to unlock the account it prompts my test user with a security question. Is there a way to not require a security question? Those security questions could be bypassed by malicious individuals.
@zjicp (zjicp)
For your first question, there is a GA feature flag, INTERNATIONAL_SMS, that enables SMS messages to be sent from overseas. Based on what you have purchased from Okta, the supported SKU will enable this functionality, where a drop-down for other countries will be shown.
For your second question, there is a EA feature flag called DISABLE_SECURITY_QUESTION_FOR_RECOVERY which would allow you to not require the security question to be answered during the recovery flow. To turn on this feature, you would need reach out to Okta Support, where they should be able to turn this on, in your purchased Okta org, based on the products/SKUs you've purchased.