<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z0000AJEea1CQDOkta Classic EngineMulti-Factor AuthenticationAnswered2026-03-08T09:00:22.000Z2025-02-04T16:40:40.000Z2025-02-28T16:46:12.000Z

ay2vv (ay2vv) asked a question.

Okta Embedded Widget w/ DUO Integration - Invalid Factor

I'm using Okta's Embedded Widget in Classic Mode.

 

I've successfully integrated the widget and can use okta to login when using no MFA or Okta's MFA. However, when trying to login with 3rd party MFA such as DUO, I receive the following error:

 

Image is not available

The error only appears after I've validated my credentials and attempt to validate my 2FA code

Image is not available

How can I go about fixing this?


ay2vv likes this.
  • User17157611498146715886 (Customer Support Online Community and Social Care)

    Hello @ay2vv (ay2vv)​ , thank you for contacting Okta Community.

     

    We have an article for troubleshooting this error for MFA (in general) that can be a good starting point:

    Troubleshooting "Factor Type is invalid" Error During MFA

     

    You may also want to look at the logs of the user/s experiencing this issue. To see all logs for one user in particular, you can access their profile (from Directory > People) and click on View Logs. The most recent logs will be displayed. Expand anything that says "challenge" or "denied". It could hint at what exactly is failing. You can read more about system logs below:

    System Log

    System Log filters and search

    User Sign-in and Recovery Events in the Okta System Log

     

    If all troubleshooting fails, you could reset the DUO factor and re-enroll. If the matter still persists, you can try to remove DUO from the org and start over completely. You can review the following articles:

    Duo Security (MFA)

    Configure the Duo Security authenticator

    *Important: please make sure you have another factor that is set up and functional for the admin account/s before disabling DUO. MFA is mandatory for all users with admin-level permissions; removing only one available will result in a lockout. Once all access to the Admin console of an org is lost, the only way to regain it is through a Support ticket, which is a feature available to paid accounts only.

     

    Unfortunately, the error message doesn't tell us exactly what is wrong, so there isn't a straight-cut answer for how to fix it. Hopefully, this helps you troubleshoot the matter.

     

    Regards. 

    --

    Help others in the community by liking or hitting Select as Best if this response helped you.

    Expand Post
    Selected as Best
  • User17157611498146715886 (Customer Support Online Community and Social Care)

    Hello @ay2vv (ay2vv)​ , thank you for contacting Okta Community.

     

    We have an article for troubleshooting this error for MFA (in general) that can be a good starting point:

    Troubleshooting "Factor Type is invalid" Error During MFA

     

    You may also want to look at the logs of the user/s experiencing this issue. To see all logs for one user in particular, you can access their profile (from Directory > People) and click on View Logs. The most recent logs will be displayed. Expand anything that says "challenge" or "denied". It could hint at what exactly is failing. You can read more about system logs below:

    System Log

    System Log filters and search

    User Sign-in and Recovery Events in the Okta System Log

     

    If all troubleshooting fails, you could reset the DUO factor and re-enroll. If the matter still persists, you can try to remove DUO from the org and start over completely. You can review the following articles:

    Duo Security (MFA)

    Configure the Duo Security authenticator

    *Important: please make sure you have another factor that is set up and functional for the admin account/s before disabling DUO. MFA is mandatory for all users with admin-level permissions; removing only one available will result in a lockout. Once all access to the Admin console of an org is lost, the only way to regain it is through a Support ticket, which is a feature available to paid accounts only.

     

    Unfortunately, the error message doesn't tell us exactly what is wrong, so there isn't a straight-cut answer for how to fix it. Hopefully, this helps you troubleshoot the matter.

     

    Regards. 

    --

    Help others in the community by liking or hitting Select as Best if this response helped you.

    Expand Post
    Selected as Best
This question is closed.
Loading
Okta Embedded Widget w/ DUO Integration - Invalid Factor