Require Okta 2FA on every login?

Biff_Buff
New Contributor II

Hey folks..

Management is wondering if / how we can prompt the user to enter Okta 2FA / Okta Verify app pursh or code every time the user logs into their Mac.


is this possible?  I personally don't want it, but I'm just following orders.

4 REPLIES 4

merps
Contributor III

There's an application called TecMFA from the Tecnics company that can do this. It only works during login and not unlock, though.

They have decent support, but the product is more fully featured for Windows than it is for macOS.

Tribruin
Valued Contributor II

Jamf Connect can do that. Unless I am missing something in your request?

However, be aware it will introduce a two prompt situation, assuming you are using FileVault. The user will authenticate at the FileVault unlock screen to unlock the drive. Then user will be prompted for their username and password and 2FA to login in to the computer. 

Biff_Buff
New Contributor II

Thanks.  So how do you configure it?

MrBombadil
New Contributor III

My question as well.  I setup Jamf Connect with Okta integration but I cannot seem to get 2FA to pop up when users authenticate to Okta on their Macs.  I configured Jamf Connect in Okta admin as well via Auth Policies.  Am I missing something?