TonyE.13913 (Customer) asked a question.
Access Mobile number used in MFA to update profile Mobile number
Hi
Is it possible to use the Mobile number used in MFA enrolment for SMS to add this to the User Profile. I want to use a verified mobile number as a Mobile number on the users profile, which when a user enrols in MFA SMS their number would be entered and verified by the OTP.
I don't want to have to ask the user to enter a mobile number at registration twice i.e. at registration and then again when enrolling in MFA.
Is there a way for the user to enter their number once and this be used for both scenarios either to enrol in MFA or update the profile.
Thanks in advance
Thank you for reaching out. My name is Jose Sandoval from the Okta support team.
After the SMS MFA enrollment, the phone number is added to the factor options and if configured in password policies to the Forgot Password Text message. At this time the users may need to enter their phone number manually to their profiles.
The current configuration for the Okta user is to add the information separately from the SMS factor.
I hope this information works and in case of any additional questions feel free to reach out to the Okta support team.
Hi @User15932079466932298204 (Vendor Management)
Thanks for you reply. So is there anyway to access the Mobile number used in the SMS MFA enrolment? The idea would be to know that the user has verified the number they have entered which the SMS OTP would do as they have received a OTP to the number supplied.
The user entering the number on the profile is simply the user typing the number in which they could type wrong.
Tony
Hi @TonyE.13913 (Customer)
For security reasons once the user has entered the number for the SMS MFA, it will not be visible in the org for admins. It will display some numbers at the log in screen for the user awareness of having the correct information.
The only option to see it in the user profile is by setting SMS recovery in your Authentication > Password and have the SMS as a recovery option in the Account Recovery section. If you do not have SMS as recovery it will display other forms of recovery based on your policies.
If the user changes the number in the "Forgot Password Text Message" it will also change the number associated with the SMS MFA. This section is the one to display the number in use for the SMS MFA. In case they type the wrong number they will not be able to enroll the account in MFA but once the correct information has been entered they can review their profile settings for the FPTM and copy the same number to their profile.
I hope this information works!