Manual Chapter : Okta MFA subsession variables

Applies To:

Show Versions Show Versions

BIG-IP APM

  • 17.1.0, 17.0.0, 16.1.5, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 15.1.10, 15.1.9
Manual Chapter

Okta MFA subsession variables

The Okta MFA agent uses the
subsession.logon.last.username
variable for Okta queries from current or previously executed (using the last. prefix) subroutines. The agent creates the following output variables in the case of successful authentication or enrollment:
  • subsession.okta_mfa.result
    , which contains 1
  • subsession.okta_mfa.factor
    , which stores the factor name (
    okta_totp
    /
    okta_push
    /
    yubico_otp
    )
The Okta MFA agent has two branches: Successful and fallback. The Successful branch expression is automatically set to
expr {[mcget {subsession.okta_mfa.result}] == 1}
.