Office 365 MFA pass claim

After you upgrade to Identity Engine, learn about the changes for Microsoft Office 365.

Change summary Classic Engine: Org-level MFA requirements let users authentication with a pass claim.

Identity Engine: Org-level MFA requirements don't meet the pass claim requirements (one knowledge factor plus one possession factor).

Admin experience You need to set up authentication policy rules for MFA.
User experience If users enter an infinite loop because they don’t complete MFA during the SSO flow, they should refresh and sign in with a different browser.
Related topics Use Okta MFA for Azure Active Directory