User17701983935681775947 (Customer) asked a question.
Admin MFA disabled forgot to set the policy to disable MFA check. Now, locked out of the account itself
Hi team,
We are locked out of our Okta org due to an MFA device issue.
Situation:
- There were two devices enrolled earlier
- One device (mine) is no longer available
- The only remaining enrolled device is an iPhone belonging to another user
- We do NOT have an active Super Admin session available
- Login attempts now result in a 403 / access blocked
Because MFA is required and the available device is not accessible to me, I cannot complete authentication or access the Admin Console.
Request:
What is the correct recovery process when:
- MFA is enforced
- The admin’s enrolled device is no longer available
- Only another user’s device remains
- No Super Admin can currently log in
Please advise on admin recovery / escalation steps. We can provide org or domain ownership verification if required.
Thanks.
Hello @User17701983935681775947 (Customer) Thank you for posting on our Community page!
It depends on what type of service you have with Okta.
If you have a Paid service with Okta, you can open a case and Support will be able to reset your MFA and further help you in recovering the account.
If you have a Free Integrator/Trial/Developer account, unfortunately these type of services do not have access to Support and there no way for us to provide further assistance.
You may, however, create a new free trial/Developer account. We encourage you to always have a brake gals account for these type of situations.
Thank you for reaching out to our Community and have a great day!
--
Help others in the community by liking or hitting Select as Best if this response helped you.