We are using OKTa sign in widget and if user requires MFA and has not registered the widget lets the user register MFA device, is it possible to not let pass the MFA registration and log out of the widget if they dont have MFA set up.
Essentially we want the user to register MFA devices elsewhere and not through sign in widget
Sounds like this roadmap feature should help:
Adaptive MFA
In Development
Factor Enrollment Grace Periods
The ability to progressively rollout multi-factor authentication using grace periods on required factors.
https://support.okta.com/help/s/productroadmap?tabset-e7458=2
I think @subgeeth wants to PREVENT MFA enrollment, not allow users to delay it. For example, an enterprise might only want MFA enrollment to occur from a trusted network location.