dse7i (dse7i) asked a question.
Is there a way for a user to set their default MFA in OIE like they could in Classic?
After we upgraded to OIE, users get prompted with an MFA page to select which MFA they want to use. Is there a way to make Okta remember which MFA users want to use instead of this prompt?
For example, we have Okta Verify and WebAuthn enabled. Users will get the following 3 options:
- Enter a code (Okta Verify)
- Get a push notification (Okta Verify)
- Security Key or Biometric Authenticator
Hi Andrew Wong ,
To empower the users with the privileges of choosing the MFA enrollment of their choice, you need to set the enrollment factors condition as "OPTIONAL". This allows users to enroll to either of one or both of the enrollment factors depending on their discretion.
If there are multiple enrollment factors set to "REQUIRED", then the users must enroll to all of the options, without skipping any. But, for the next sign in, the user can choose either of one enrollment factor to authenticate for the MFA.
The enrollment factor condition "OPTIONAL" acts as "REQUIRED" if there is only one enrollment factor configured, which enforces user to enroll to the factor.
Hi @dse7i (dse7i) , Thank you for reaching out to the Okta Community!
If I'm understanding your request right - no, there currently is no option to set up a preferred MFA option for the login screen.
If I'm remembering it right, we had a lot of feedback about the old dropdown model not being intuitive enough for end-users who might have more than one Authenticator type enrolled, so I suspect that is why they are all displayed now.
That being said, please don't quote me 🙂 on this as I don't have any insight into the Products/Engineering team's design decisions.
You can suggest perhaps making this an option on the Okta Community page by going to the Community→ Ideas tab. Features suggested in our community are reviewed and can be voted and commented on by other members. High popularity will increase the likelihood of it being picked up by the Product Team and it being implemented.
More details here:
https://support.okta.com/help/s/blog/a674z000001cj7YAAQ/okta-ideas-faq?language=en_US
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--------------------------------
Community members help others by clicking Like or Select as Best on responses. Try it today.