v8yup (v8yup) asked a question.
Active Directory Password Reset with Duo MFA
Hello, all.
I'm just wondering if Okta can facilitate this use case:
New Hire is created in AD with a random password that they never receive. Okta uses AD password for authentication. The new hire is directed to Okta to reset their password and login for the first time, which would occur off domain. Would like to have DUO MFA for to verify the user for this process. Can this be achieved?
In the AD integration documentation, I see SMS and email as ways to reset the password, but nothing about MFA apps like Duo. I'm certain I can build this process with Okta sourced passwords, but can't find anything to confirm if the AD password component changes that ability.
Thanks in advance!
Hello @v8yup (v8yup),
You need to ensure:
Please check the following link with information: https://support.okta.com/help/s/article/Creating-a-Password-Policy
But first, check that Okta's self-service recovery options are suitable for your organization: https://help.okta.com/oie/en-us/Content/Topics/identity-engine/authenticators/configure-sspr.htm
Regards,
Natalia
Okta Inc.