okta / samples-js-vue

samples-js-vue
https://github.com/okta/samples-js-vue
Other
57 stars 63 forks source link

[Custom Okta Login] MFA specific customizations are getting ignored #87

Closed aiadwx closed 3 years ago

aiadwx commented 3 years ago

Hi @mraible (as discussed), All

For the login flow, the user's browser gets redirected to the configured Okta URL instead of staying on the widget for the MFA step. However, for password recovery flow (i.e. forgot password via SMS), the browser stays on the app page.

Since the user gets redirected to Okta URL during login flow, none of the MFA specific customizations in the widget configuration section of Login.vue are getting applied (except for primaryauth.title).

... i18n: { en: { 'primaryauth.title': 'Sign in to Vue & Company', 'factor.sms': 'SMS OTP', 'factor.sms.description': 'Enter the OTP code sent to your mobile phone.', 'mfa.sendCode': 'Send OTP from Widget', 'mfa.sent': 'OTP Sent', 'mfa.resendCode': 'Re-send OTP', 'mfa.challenge.verify': 'Confirm', 'mfa.challenge.enterCode.placeholder': 'Enter your OTP code' ...

Kindly refer to the attached screenshot highlighting the customization getting ignored.

Sign-in Widget Customisation getting ignored

aiadwx commented 3 years ago

Managed to resolve this issue with the help of Dragos Gaftoneanu (Okta Developer Support Engineer).

Resolution summary: • This is currently a feature gap, as app level MFA is not currently supported inside the sign-in widget. Must be org level only. • Following James Fang's confirmation, the issue will be fixed when Okta Identity Engine is released