RobertC.79156 (Customer) asked a question.
Microsoft is rolling out mandatory MFA for all users in there tenants.
All our domains are federated with Okta already and Okta does the MFA etc. Is there any configs that we will need to do on our Okta tenant.
As per Microsoft:
External authentication methods and identity providers
Support for external MFA solutions is in preview with external authentication methods, and can be used to meet the MFA requirement. The legacy Conditional Access custom controls preview won't satisfy the MFA requirement. You should migrate to the external authentication methods preview to use an external solution with Microsoft Entra ID.
If you're using a federated Identity Provider (IdP), such as Active Directory Federation Services, and your MFA provider is integrated directly with this federated IdP, the federated IdP must be configured to send an MFA claim.
Hi @RobertC.79156 (Customer) , thank you for contacting Okta Community.
According to the following document, you should be able to configure Okta's MFA for Microsoft through a policy:
Use Okta MFA for Azure Active Directory
Regards.
--
Help others in the community by liking or hitting Select as Best if this response helped you.
Yes @User17157611498146715886 (Customer Support Online Community and Social Care) - but what about the Okta O365 integration for provisioning. Per Okta documentation, the integration account should not be configured for MFA. What is Okta's plan to address this?