<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z00009vFpWsCAKOkta Classic EngineAdministrationAnswered2023-12-22T22:45:51.000Z2023-12-21T16:40:39.000Z2023-12-22T22:45:51.000Z

SethA.50804 (Customer) asked a question.

Logs - Password success but MFA failure?

Hello,

I am looking to write some alerts around when a user successfully authenticates with their password but fails or does not complete the MFA challenge. I have found the reference below but since "Password" is considered an authentication method, I don't seem to have a find to check if it was successful and the real MFA was not. Any ideas?

 

https://support.okta.com/help/s/article/System-Log-queries-for-attempted-account-takeover?language=en_US


  • User16594883467582706479 (Customer Support Online Experience)

    Hi, @SethA.50804 (Customer)​ 

     

    Thank you for posting on our Community page!

     

    You could try Alert on any MFA failure that is not of type PASSWORD_AS_A_FACTOR

     

    But my suggestion is to get in touch with your CSM or open a case with Support so they can take a deeper look into your use case.

     

    Earn Today: New Okta Community Badges Have Arrived

     

    Community members help others by clicking Like or Select as Best on responses. Try it today.

    _____________________________________________________________________________

     

    Expand Post
This question is closed.
Loading
Logs - Password success but MFA failure?