6v8ik (6v8ik) asked a question.
Run a registration campaign to setup or promote Okta verify app to end users.
Is there a OOB feature to nudge end users to consider setup Okta verify app during their sign-in.
Flow we are looking for is below.
Users will go through their regular sign-in, perform multifactor authentication as usual, and
then be prompted to consider and set up Okta verify as their authentication factor and users will have option to register or skip it.
Also looking to roll out this feature in incremental process adding certain groups to control who gets nudged to set up the app.
All we are looking for is to increase users count using more secure and friendly authentication method with Okta Verify.
Hello @6v8ik (6v8ik),
Thank you for posting.
The option that you are looking for is an Okta Sign-in policy.
Okta sign-on policies and rules provide a secure and flexible way to control how users authenticate and sign in to their accounts. Password policies, Okta global sign-on policies, and app-specific sign-on policies can be configured.
Each policy type affects various aspects of security such as the type of MFA factors that should be enforced, user password complexity, permitted devices, the level of risk, and allowed locations. Policies consist of rules and conditions that can be further defined for more complex use cases.
Please check the following link with information:
https://help.okta.com/en/prod/Content/Topics/Security/policies/configure-signon-policies.htm
Regards,
Natalia
Okta Inc.
Thank you Natalia, Tried the option with Okta Sign-in Policy with factor sequence.
Couldn't achieve the use case which I am looking for.
Use Case: Post to the end user password authentication, verify if user already registered for the authenticator app as a factor or not. If user is not registered, present an option to be considered to enroll for authenticator app as a 2sd factor and give a choice here. If user decide not to enroll they can skip it and use the SMS / call / email verification factors which they already enrolled before.
Looking for the similar feature here as implemented in MS.
https://docs.microsoft.com/en-us/azure/active-directory/authentication/how-to-mfa-registration-campaign
Thank you,
krishna.