MFA for Admin Users

[sandeepgudipudi]

Requirement:

We are using Azure as SSO for End Users and We want to enable MFA for Admin Accounts/locally created users which are not SSO Accounts.

I referred below documents and implemented steps but nothing is working neither prompting for MFA

Using Okta as provider in Settings>MFA - Security Considerations (saviyntcloud.com)

Using REST Connector for Okta- Configuring Step-up Authentication and Verification (saviyntcloud.com)

[Saathvik]

@sandeepgudipudi : No you cannot enable MFA for locally created account unless same account exists in Identity provider. Can you please explain the use case why you want to enable MFA for accounts created locally? If use case is just to avoid login through non-sso URL then Saviynt in general blocks the non-sso URL from being accessed unless you put in a exception.

[sandeepgudipudi]

Hi,

we figured out a way to local login even SSO is enabled. How ever i disabled SSO and tried the above steps still MFA is not prompted

[rushikeshvartak]

Does MFA not working for any user or admin users?

[sandeepgudipudi]

MFA is not working for all users, its not even prompting for MFA

[rushikeshvartak]

• Any error in Saviynt logs ?
• Any OKTA Login related audit logs?

[sandeepgudipudi]

There are no logs specific to MFA

[sandeepgudipudi]

I configured for "Saviynt to generate OTP" as described in the document for email OTP. Post Login with username/password the saviynt is not prompting for MFA.

Document: https://docs.saviyntcloud.com/bundle/EIC-Admin-v2020x/page/Content/Chapter14-Password-Management/Con...

Section: Configuring OTP Authentication Methods

[rushikeshvartak]

Please share config screenshot

[sandeepgudipudi]

Please find attached

[rushikeshvartak]

Does JSON configuration done 

[sandeepgudipudi]

Json for MFA? nothing stated as such in document.

[sandeepgudipudi]

However i did configured okta for MFA and still it did not prompt for MFA