AndrewC.67337 (Customer) asked a question.
Okta multifactor is multistep and not compliant with industry standards
There are some industry guidelines in the UK which require that all MFA factors be verified prior to the authentication mechanism granting access and that "no prior knowledge of the success or failure of any factor should be provided to the individual until all factors have been presented". As Okta auth doesn't comply with this, I am wondering what Okta's thoughts are? if there are any features in dev for this?
Hi @AndrewC.67337 (Customer) , Thank you for reaching out to the Okta Community!
I'm not aware of anything specific to the use case you presented but if you are interested in Okta's Compliance you can review more information here.
As for future development, you can check our Product roadmap here.
Beyond that, please reach out to your Okta Account Executive or Custom Success Manager for more information.
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--------------------------------
Follow us at OktaSupport