9wd7m (9wd7m) asked a question.
Removing SMS as a factor when thats the only factor most users are enrolled in
We want to remove SMS as a factor, however, almost all of our users are using it as their sole factor. My plan is to mark Okta verify as required, give it a couple of weeks so everyone gets enrolled, then remove SMS. Does this sound like a reasonable plan?
If I were to just disable SMS, would the users get prompted to enroll in MFA or would they get locked out as they have no factors available for login?
Hi, @9wd7m (9wd7m)
Thank you for posting on our Community page!
I would suggest MFA factor sequencing to make sure that the login goes smoothly until you implement OV on a larger scale. You could test it first on a small group.
https://help.okta.com/en-us/content/topics/security/mfa-factor-sequencing.htm
If a specific factor is specified in a policy, that factor can't be removed until it's removed from all the policies that require it. If MFA is enabled for your org, you're required to specify at least one factor. If a factor isn't specified, an error message appears on the Multifactor page.
Thank you for reaching out to our Community and have a great day!
_____________________________________________________________________________
Community members help others by clicking Like or Select as Best on responses. Try it today.
_____________________________________________________________________________