<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D5WR00001BJiUq0ALOkta Classic EngineMulti-Factor AuthenticationAnswered2026-01-30T17:18:41.000Z2026-01-19T07:30:25.000Z2026-01-30T17:18:41.000Z

KonradK.95489 (Customer) asked a question.

Cannot access Okta org or open a support case after removing MFA

I have removed MFA enrollment from my integrator organization (Okta Verify was added by default) because I did not want to enroll to it just for a sake of tests. Now I cannot log in to my organization with this message popping up (doesn't matter if I want to connect to admin panel or normal dashboard)

/help/servlet/rtaImage?refid=0EMWR00000O5itp

 

I also cannot open a support case because it shows that I do not have such permission (my account is super admin account, there is no other admin account in this org).

In the networking there is such message as a response to my log in request:

 

  "messages": {

    "type": "array",

    "value": [

      {

        "message": "Unable to sign in. Contact support for assistance.",

        "i18n": {

          "key": "api.policy.okta.account.management.insufficient.authenticators.unable.to.sign.in"

        },

        "class": "ERROR"

      }

    ]

  },

 

In summary - Okta allows you to remove all MFA but requires MFA to verify admin permissions so it essentially allows you lock out all admins out of all panels and to block opening support cases essentially bricking the whole organization. The only thing is that logging in to app integrations works as before lol

 

Did anyone also encounter it and if you did - did you manage to somehow resolve this? I considered opening support case while logged in as other org admin just so I can somehow contact them.


  • Paul S. (Okta, Inc.)

    Hello @KonradK.95489 (Customer)​ Thank you for posting on our Community page!

     

    MFA is required for Admins, since you removed it this is the reason for the error you are seeing.

    Since this is an Integrator account, these type of account do not receive access to Support to provide further assistance. You may, however, create a new free trial/Developer account.

     

    Also please note that if you have a Paid Service with Okta, you can open a case with support for additional assistance.

     

    Thank you for reaching out to our Community and have a great day!

    --

    Help others in the community by liking or hitting Select as Best if this response helped you.

    Join the discussion for our Ask Me Anything on January 20, 2026: Adoption of Stronger Authentication MFA. Ask our expert questions. 

    Expand Post
    Selected as Best
  • Paul S. (Okta, Inc.)

    Hello @KonradK.95489 (Customer)​ Thank you for posting on our Community page!

     

    MFA is required for Admins, since you removed it this is the reason for the error you are seeing.

    Since this is an Integrator account, these type of account do not receive access to Support to provide further assistance. You may, however, create a new free trial/Developer account.

     

    Also please note that if you have a Paid Service with Okta, you can open a case with support for additional assistance.

     

    Thank you for reaching out to our Community and have a great day!

    --

    Help others in the community by liking or hitting Select as Best if this response helped you.

    Join the discussion for our Ask Me Anything on January 20, 2026: Adoption of Stronger Authentication MFA. Ask our expert questions. 

    Expand Post
    Selected as Best
  • KonradK.95489 (Customer)

    Hi

    "You may, however, create a new free trial/Developer account." - No, I can't. When I try I get message "An Okta Integrator Free Plan org already exists for the email provided" so it means that I am blocked from ever using this kind of plan? Seems like a huge workflow defect when 1 admin can brick the whole organization. Shouldn't option to remove MFA enrollment be blocked when there is only one?

     

    And how can I create other trial account if I get this error?

    Expand Post
    • Paul S. (Okta, Inc.)

      Hello @KonradK.95489 (Customer)​  You can use a different email address to create a different Integrator org or you can submit a request via this form for data deletion if needed.

       

      Thank you for reaching out to our Community and have a great day!

      --

      Help others in the community by liking or hitting Select as Best if this response helped you.

      Expand Post

Loading
Cannot access Okta org or open a support case after removing MFA