<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z00009n7grNCAQOkta Classic EngineAPI Access ManagementAnswered2024-05-17T09:00:40.000Z2023-10-26T20:54:30.000Z2023-10-31T21:41:47.000Z

fkc4q (fkc4q) asked a question.

Factors API not listing enrolled factors used only for recovery

Related: https://support.okta.com/help/s/question/0D54z00008bPKbwCAG/factors-api-doesnt-show-email-factor-even-if-already-enrolled-for-a-user?language=en_US

 

REF: https://developer.okta.com/docs/reference/api/factors/*get-factor

 

When i query a user's enrolled factors via the API is is only returning results for Authentication factors and omits factors that are enrolled but marked for recovery only.

 

How can I get a response of ALL factors?


  • MatthewH.10249 (State of Iowa)

    I noticed the same thing and if you use the Okta Rockstar Plugin to verify MFA you won't see them listed in its interface either. I don't find any API optional flags or other API methods to get them and I find no documentation stating this limitation.

     

    Have you tried the "{{url}}/api/v1/users/{{userId}}/factors/catalog" to see if it lists all? I know that is not what you want but it might be good to know if it is a limitation with that API method as well.

     

    Unless someone at Okta chimes in soon, you might just open a support case with Okta Support as see what they have to say. Be prepared for them to have you open an Okta Idea where you can asked for expanded API functionality if they say the limitation is by design.

    Expand Post
    Selected as Best
  • MatthewH.10249 (State of Iowa)

    I noticed the same thing and if you use the Okta Rockstar Plugin to verify MFA you won't see them listed in its interface either. I don't find any API optional flags or other API methods to get them and I find no documentation stating this limitation.

     

    Have you tried the "{{url}}/api/v1/users/{{userId}}/factors/catalog" to see if it lists all? I know that is not what you want but it might be good to know if it is a limitation with that API method as well.

     

    Unless someone at Okta chimes in soon, you might just open a support case with Okta Support as see what they have to say. Be prepared for them to have you open an Okta Idea where you can asked for expanded API functionality if they say the limitation is by design.

    Expand Post
    Selected as Best
This question is closed.
Loading
Factors API not listing enrolled factors used only for recovery