Require Okta 2FA on every login?

[Biff_Buff]

Hey folks..

Management is wondering if / how we can prompt the user to enter Okta 2FA / Okta Verify app pursh or code every time the user logs into their Mac.

is this possible?  I personally don't want it, but I'm just following orders.

[merps]

There's an application called TecMFA from the Tecnics company that can do this. It only works during login and not unlock, though.

They have decent support, but the product is more fully featured for Windows than it is for macOS.

[Tribruin]

Jamf Connect can do that. Unless I am missing something in your request?

However, be aware it will introduce a two prompt situation, assuming you are using FileVault. The user will authenticate at the FileVault unlock screen to unlock the drive. Then user will be prompted for their username and password and 2FA to login in to the computer. 

[Biff_Buff]

Thanks.  So how do you configure it?

[MrBombadil]

My question as well.  I setup Jamf Connect with Okta integration but I cannot seem to get 2FA to pop up when users authenticate to Okta on their Macs.  I configured Jamf Connect in Okta admin as well via Auth Policies.  Am I missing something?