# MFA Error: The client specified not to prompt, but the client app requires re-authentication or MFA

**URL:** <https://devforum.okta.com/t/mfa-error-the-client-specified-not-to-prompt-but-the-client-app-requires-re-authentication-or-mfa/2715>\
**Category:** API\
**Tags:** api\
**Created:** [September 12, 2018, 2:19am UTC](https://devforum.okta.com/t/mfa-error-the-client-specified-not-to-prompt-but-the-client-app-requires-re-authentication-or-mfa/2715 "2018-09-12T02:19:52Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![vc12](https://avatars.discourse-cdn.com/v4/letter/v/cab0a1/32.png) [@vc12](https://devforum.okta.com/u/vc12)\
**Post date:** [September 12, 2018, 2:19am UTC](https://devforum.okta.com/t/mfa-error-the-client-specified-not-to-prompt-but-the-client-app-requires-re-authentication-or-mfa/2715/1 "2018-09-12T02:19:52Z")

</div>

I get the following error after the google authenticator mfa gets successfully verified and “SUCCESS” is returned.

```auto
error.errorCode: login_required, error.description: The client specified not to prompt, but the client app requires re-authentication or MFA

```

I have created a policy in okta admin and checked off “Prompt for Factor”. The MFA verification call (stateToken and passCode body params) returns a “SUCCESS” response but after the setCookieAndRedirect(data.sessionToken) gets called, I get the above error.

All suggestions welcome! Thanks.

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [February 12, 2024, 6:37pm UTC](https://devforum.okta.com/t/mfa-error-the-client-specified-not-to-prompt-but-the-client-app-requires-re-authentication-or-mfa/2715/2 "2024-02-12T18:37:27Z")

</div>