Manual Chapter :
Okta MFA subsession variables
Applies To:
Show Versions
BIG-IP APM
- 17.1.2, 17.1.1, 17.1.0, 17.0.0, 16.1.5, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 15.1.10, 15.1.9
Okta MFA subsession variables
The Okta MFA agent uses the
subsession.logon.last.username
variable for Okta
queries from current or previously executed (using the last. prefix) subroutines. The agent
creates the following output variables in the case of successful authentication or
enrollment:- subsession.okta_mfa.result, which contains 1
- subsession.okta_mfa.factor, which stores the factor name (okta_totp/okta_push/yubico_otp)
The Okta MFA agent has two branches: Successful and fallback. The Successful branch expression
is automatically set to
expr {[mcget {subsession.okta_mfa.result}] == 1}
.
