Use Okta MFA claim with Security Defaults (not Microsoft Authenticator)

Question

Use Okta MFA claim with Security Defaults (not Microsoft Authenticator)

Josh Thompson 0

We have multiple tenants, one of which is licensed and is configured to provision users from Okta. Our other tenants are free-tier and have Security Defaults enabled to enforce MFA. We invite employees at their Okta user email to become B2B Collaboration users in the free-tier tenants.

With this setup, our internal/employee users logging in to the Azure Portal of free-tier tenants where Security Defaults are turned on end up with the following authentication flow:

redirected at login to authenticate with Office365 via Okta
after successful authentication are redirected back to Azure
users are prompted to register and use Microsoft Authenticator app to satisfy MFA, despite the fact that Okta is configured to pass the MFA claim.

Is it possible in free-tier tenants with Security Defaults enabled to have Azure Portal accept the Okta MFA claim to satisfy the MFA requirement enforced by Security Defaults? This flow is forcing a third-factor of authentication that is unnecessary with our use of Okta.

Gudivada Adi Navya Sri 21,095 Reputation points Moderator

2024-05-22T12:05:00.6366667+00:00

Hi @Josh Thompson

Following up to see if the below answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Gudivada Adi Navya Sri 21,095 Reputation points Moderator

2024-05-24T04:13:30.05+00:00

Hi @Josh Thompson

Following up to see if the below answer was helpful. Please remember to "Accept Answer" if answer helped you. This will help us as well as others in the community who might be researching similar questions. if you have any further query do let us know.

1 answer

Your answer

Gudivada Adi Navya Sri 21,095 Reputation points Moderator

2024-05-22T12:05:00.6366667+00:00

Hi @Josh Thompson

Following up to see if the below answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Gudivada Adi Navya Sri 21,095 Reputation points Moderator

2024-05-24T04:13:30.05+00:00

Hi @Josh Thompson

Following up to see if the below answer was helpful. Please remember to "Accept Answer" if answer helped you. This will help us as well as others in the community who might be researching similar questions. if you have any further query do let us know.

Answer 1

Andy David - MVP 160.3K MVP Volunteer Moderator

Thats something that will require a CA policy and the corresponding licenses (p1/p2)

https://learn.microsoft.com/en-us/entra/external-id/authentication-conditional-access#comparing-external-id-conditional-access-policies

User's image

0 comments

Share via

Use Okta MFA claim with Security Defaults (not Microsoft Authenticator)

1 answer

Your answer