MattS.78067 (Customer) asked a question.
Hi Everyone,
I just signed up for the Okta Integrator trial this morning looking to do some development testing work within my organization and it appears myself and the other user I created an account for and assigned a license to somehow got locked out. I created a new group, created a new policy to only use password for sign in, and then updated the authentication policy to use that group.
After that, I tried performing more actions in the admin console and got timed out and am now receiving 403 errors when signing in. The other user is just receiving an error stating to contact support for help.
Any suggestions? I apparently am not able to contact support even though I was marked as a Super Admin in the admin console.
Thanks!
Hello @MattS.78067 (Customer) Thank you for posting on our Community page!
The cause for this could be the policies for the org, unfortunately Free trial/Developer account credentials or MFA cannot be accessed by anyone outside of the primary account administrator. Therefore, Okta is unable to access or reset your username and password or MFA.
Please also see: https://support.okta.com/help/s/article/recovery-steps-in-case-of-developer-edition-org-admin-account-lockout-post-mfa-enforcement?language=en_US
You may, however, create a new free trial/Developer account. We encourage you to save the credentials to ensure access in the future.
Also please note that if you have a Paid Service with Okta, you can open a case with support for additional assistance.
Thank you for reaching out to our Community and have a great day!
--
Help others in the community by liking or hitting Select as Best if this response helped you.
Hi Paul,
Understood, I definitely think it is due to the policies. Is there anyway that Okta could delete that trial program for us so that I would be able to reuse the same email/information? It was just opened this morning so I don't mind losing anything that was setup.
Hello @MattS.78067 (Customer) If you have a paid account with us, please reach out to your Okta Account Executive to discuss the contract cancelation and org deactivation.
If you don't have your Okta Account Executive contact information, please open a case with our colleagues from the Okta Support team and they will reach out internally for details, validation and clarifications.
If you have a free trial/developer/integrator account, please note that these fall outside of the scope of support.
You can submit a request via this form for data deletion if needed.
Thank you for reaching out to our Community and have a great day!
--
Help others in the community by liking or hitting Select as Best if this response helped you.
@MattS.78067 (Customer) you can may be try appending +1 to the email and register a new tenant.
When you get one, do remember MFA is mandatory for administrators. Creating conflicting policies would lock you out. Always segregate test users from admin accounts.
Create password only policies only to specific groups that do not involve admins.
As a backup, keep a break glass account with email as mfa factor (not recommended in production) so that you always have backdoor access.