Free Okta-Certified-Professional Okta Updates

https://help.okta.com/en/prod/Content/Topics/Security/MFA.htm

An Okta admin can configure MFA at the organization or application level. If both levels are enabled, end users are prompted to confirm their credentials with factors both when signing in to Okta and when accessing an application.

1. Click on the password reset linkInclude a Click here to reset your password link on the Okta Sign-On page so that users can intuitively initiate the password reset flow. By combining self-service password resets with SSO, not only can organizations reduce the number of required passwords (a security benefit, as well as end-user convenience) but users are able to access all their applications through a single password reset.

2. Receive either an email or an SMS messageThe user has the option to receive either an email or an SMS message containing a password reset code. With both options, the user still has to answer a security question to verify identity before they are allowed to reset their password. This security question and answer is created when users enroll in Okta MFA.

3. Enter a new passwordThe newly created password can still impose the same password policies such as character length, number of special characters required, etc., ensuring a consistent password policy throughout the organization.

https://www.okta.com/resources/whitepaper/enable-self-service-password-resets/