Disabling or Re-Registering Multi-factor Authentication for users
The multi-factor authentication option automatically will apply to all users in the account. If you wish to exclude a user from using the multi-factor authentication (MFA) option, enforcing only their credentials to get logged in, you may follow these directions after MFA is enabled in your account:
1. Settings
2. User Management
3. Select the user
4. Update "Enforce MFA during login?" to "No" to remove the requirement of MFA. You'll find this at the bottom of the user's Basic Info page
If a user needs to re-setup the MFA or get a QR Code for Okta (perhaps due to a new phone number, new phone, or new email needs to be setup), you can RE-REGISTER MFA by going to Settings > User Management > Select the user > Click the "Re-register MFA" button at the bottom of the page:
A confirmation window will pop-up, click OK. On the users next login, they will be required to re-register their MFA setup and can follow the on-screen prompts to get an Okta QR Code or confirm their MFA email.
NOTE: If a customer requires MFA and a user is not verified using MFA, the user cannot access that customers data.