DannyM.95900 (Customer) asked a question.
I want to make a couple of different authentication policies. The main one is "All Employees" - requires security question AND (Okta Verify OR Google Authenticator OR Yubikey). I have users who use either of those applications and I need to start requiring that they have at least 1 configured and if not to prompt them to configure at least one of them. If I make then both required, then each user will have to do them both and I do not want that. I will end up making an "All Students" one with similar requirements, but I need to be able to edit that one independently so I can give them the first week or two of classes to get their security setup before locking them out.
How do I go about making the apps required as an either/or type of setup?
Hello @DannyM.95900 (Customer) , thank you for contacting Okta Community.
In order for the users to be prompted to enroll a factor, it needs to be set up as "required". If they already have at least one other factor enrolled (let's say they are being prompted to set up Okta Verify, but they already have a security question set up and functional), they can choose to "verify with something else" and use the factor that's already enrolled - thus postponing the enrollment of the new factor (in this example, they can verify with a security question and postpone enrolling Okta Verify).
You can read more about it here:
Prompting User to Enroll Optional Authenticators Later
Regards.
--
Help others in the community by liking or hitting Select as Best if this response helped you.
Collect them all. Learn a new skill and earn a new Okta Learning badge.
Not really what I am trying to do. I just need for one or the other to be satisfied, not require both. I guess I will go another route and figure something else out. Thank you for the link and feedback.