AdamH.05926 (Customer) asked a question.
We are setting up a user group that we want to deny self account recovery and self password resets. We created a password policy that denies them from resetting password. We also for testing set the group up to lock after 1 bad attempt.
During testing, when we login with a bad password we are immediately taken to "Verify it's you with a security method." page with an option for Email, Okta Verify, or Phone.
We've set the users to be unable to use the methods, only a password is allowed for verification. What section in Okta should we be looking at to change this behavior? We were hoping that it would just take the user to a screen showing that their account was locked and to contact an administrator.
Hello @AdamH.05926 (Customer) Thank you for posting on our Community page!
It depends on which policy is being triggered. I would recommend to review the System log and see if which policy is being triggered and adjust it accordingly. Please see our doc on the policy's below:
https://help.okta.com/oie/en-us/content/topics/identity-engine-upgrade/okta-sign-on-policy-changes.htm
Thank you for reaching out to our Community and have a great day!
--
Help others in the community by liking or hitting Select as Best if this response helped you.