lcbsa (lcbsa) asked a question.
Additional identity verification before taking action of MFA Reset.
Hello Team, I was looking for an additional verification post workflow of OKTA being initiated for MFA reset process.
If a manager is going to do an MFA reset for user, Can we do an additional Manager identity check just before the MFA reset?
The workflow started from OKTA as MFA reset request of a user - > This will initiate an MFA reset workflow in IDLocker (SailPoint) for a user's manager -> Manager will check the identity of the requester and validate -> An additional proof of identity of Manager event will be triggered while Manager supposed to do OKTA MFA reset for the user.
Please let me know if this is a possible scenario.
Regards,
Chandan Ghosh
@lcbsa (lcbsa) -- Hi. A similar question was asked earlier today. I created a basic Workflow template with validation in mind.
Take a look at: https://support.okta.com/help/s/question/0D54z0000A1WClHCQW/filter-users-list-based-matching-user-profile-attribute?language=en_US