Automate Web Site Testing

[sanjayap]

I have a web site which users OKTA MFA for authentication. I would like to automate this testing.

Any idea how this could be done easily ?

[dragos]

Hi @sanjayap

You can set up a security question as MFA and pass the answer to the question in the authentication calls.

[jmussman]

Just an update for people finding this.

Using a security question is that it may not be an acceptable factor for MFA for the tenant, although it could be applied just to the test identity. But if you do that, I would offer:

Create a test identity that has a policy without MFA. Make sure the identity has least privilege for what it needs to do. Beyond the support answer below I would apply a policy to the identity that only allows authentication from the test computer.

This link to a support case hints at the solution: https://support.okta.com/help/s/question/0D50Z00008G7V0a/mfa-options-and-automating-ui-and-load-tests?language=en_US.