
3f3j2 (3f3j2) asked a question.
Why previous SMS one time passcode is still valid for MFA?
Hello!
I'm using sms OTP for MFA.
When the user try to enroll sms factor first time, if he resend validation code, the old one code still remains valid , can this be changed somehow?

Hello @3f3j2 (3f3j2) Thank you for reacting out to our Community!
Unfortunately this is expected behaviour, the SMS code is valid for 5 minutes and this value cannot be edited. Please also keep in mind that if the code is used, it can not be re-used.
The Okta Community Catalysts Program is now live. Collect online badges when you participate in the Okta Help Center Questions community. Learn more here.