Implement Phishing-Resistant MFA

Learning path snapshot

• Duration: 1 hour, 45 minutes
• Format: On-demand
• Audience: Administrators
• Skill Badge: Implement Phishing-Resistant MFA
• Certification track: Okta Certified Professional Performance Exam

Learning path summary

Traditional passwords and legacy MFA methods leave organizations vulnerable to automated phishing attacks. This learning path shows administrators how to set up phishing-resistant MFA to secure user access to apps.

What skills does this learning path cover?

• Understand how pre-authentication and authentication work together to secure user identity.
• Set up network zones to establish trusted boundaries.
• Enable phishing-resistant authenticators and configure authenticator enrollment policies to enforce user enrollment.
• Create global session and authentication policies that enforce phishing-resistant MFA for your apps.
• Implement a strategic phased rollout of phishing-resistant MFA.

Common questions addressed in the learning path

How do phishing-resistant authenticators prevent phishing attacks?

Phishing-resistant authenticators, such as Okta FastPass, validate the website address during a sign-in attempt. If a user visits a fake page, the authenticator detects the invalid address and denies access to the app.

How do you enforce phishing-resistant MFA when a user attempts to access an app?

Configure the authentication policy to require a phishing-resistant authenticator.

How do you reduce user resistance when rolling out phishing-resistant MFA?

By using a multi-phase rollout that educates users, tests with a small group, updates help desk documentation, and gives clear warnings before turning off legacy MFA methods.