# Multi Factor Enrollment Policy - Calling a REST API for Decisioning

**URL:** <https://devforum.okta.com/t/multi-factor-enrollment-policy-calling-a-rest-api-for-decisioning/381>\
**Category:** API\
**Tags:** mfa\
**Created:** [August 28, 2017, 1:39pm UTC](https://devforum.okta.com/t/multi-factor-enrollment-policy-calling-a-rest-api-for-decisioning/381 "2017-08-28T13:39:40Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![ahmarimam](https://avatars.discourse-cdn.com/v4/letter/a/ebca7d/32.png) [@ahmarimam](https://devforum.okta.com/u/ahmarimam)\
**Post date:** [August 28, 2017, 1:39pm UTC](https://devforum.okta.com/t/multi-factor-enrollment-policy-calling-a-rest-api-for-decisioning/381/1 "2017-08-28T13:39:40Z")

</div>

We have our own fraud engine that decide whether or not the user needs to authenticated with second factor, just wondering if Okta provides a way to define at the policy level on calling this fraud engine and make intelligent decision!

Thanks for the help

---

<div class="post-metadata">

**Author:** ![ahmarimam](https://avatars.discourse-cdn.com/v4/letter/a/ebca7d/32.png) [@ahmarimam](https://devforum.okta.com/u/ahmarimam)\
**Post date:** [September 6, 2017, 2:53pm UTC](https://devforum.okta.com/t/multi-factor-enrollment-policy-calling-a-rest-api-for-decisioning/381/2 "2017-09-06T14:53:46Z")

</div>

Any help is appreciated

---

<div class="post-metadata">

**Author:** ![bdemers](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/bdemers/32/23_2.png) [@bdemers](https://devforum.okta.com/u/bdemers)\
**Post date:** [September 6, 2017, 4:26pm UTC](https://devforum.okta.com/t/multi-factor-enrollment-policy-calling-a-rest-api-for-decisioning/381/3 "2017-09-06T16:26:44Z")

</div>

When your fraud engine detects an issue you could add that user to an additional Group that requires MFA. Then when you triage that event you could remove the user from that group.

Does that help ?

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [January 12, 2024, 7:22pm UTC](https://devforum.okta.com/t/multi-factor-enrollment-policy-calling-a-rest-api-for-decisioning/381/4 "2024-01-12T19:22:47Z")

</div>

Closed on January 12, 2024, 7:22pm UTC