Okta IdP MFA Setup Guide

Setup Steps

  1. In My OPSWAT Central Management, navigate to Secure Access > Access Methods > IdP MFA, and Enable IdP MFA
  1. Copy the Entity ID, Single Sign-On Url, and download the IdP Certificate. Then navigate to your Okta Administrator account.
  2. In Okta, go to “Identity Providers“ to setup OPWAT’s Compliance-Based IdP MFA
  1. Add Identity Provider, “Add SAML 2.0 IdP“
  1. Fill in the information with the provided metadata from My OPSWAT Central Management
  1. Keep the default configurations in the Advanced Settings, then click “Add Identity Provider“

_

_

  1. Download the SAML metadata of the new IdP

_

  1. Upload the Okta Metadata in My OPSWAT Central Management and Save
  1. In Okta, navigate to Multifactor and configure IdP Factor to use the newly setup IdP

It is recommended to enable IdP factor on every sign on attempt for your critical applications.

  1. Inside the Okta admin panel, go to Security → Multifactor.
  2. In the Mutlifactor page, open the Factor Enrollment tab, click Add Multifactor Policy
  3. Create a Multifactor Policy with only the IdP Factor Required and all other factors Disabled
  4. In the Multifactor page, make newly created Multifactor Policy the highest priority by moving the policy to the first position in the policy list
  1. In the newly created Mutlifactor Policy, click the pencil icon on the Default rule.
  2. In the Default rule dialog, select only Applications under “User is accessing” section.
  1. Back inside the Okta admin panel, go to your applications and select an application.
  2. Select the Sign On tab
  3. Scroll down to Sign On Policy and Add Rule
  1. Configure your policy with the following Access settings, and Save
  1. Your critical application is now configured to require IdP MFA on every sign on
Type to search, ESC to discard
Type to search, ESC to discard
Type to search, ESC to discard
Next to read:
Introduction
On This Page
Okta IdP MFA Setup GuideSetup StepsRecommended Settings