# Programatically trigger MFA Request

**URL:** <https://devforum.okta.com/t/programatically-trigger-mfa-request/34150>\
**Category:** OAuth/OIDC\
**Tags:** mfa\
**Created:** [August 18, 2025, 11:51am UTC](https://devforum.okta.com/t/programatically-trigger-mfa-request/34150 "2025-08-18T11:51:44Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Harry](https://avatars.discourse-cdn.com/v4/letter/h/f6c823/32.png) [@Harry](https://devforum.okta.com/u/Harry)\
**Post date:** [August 18, 2025, 11:51am UTC](https://devforum.okta.com/t/programatically-trigger-mfa-request/34150/1 "2025-08-18T11:51:44Z")

</div>

Hey,

I’m looking for some help on programatically triggering an MFA request, such as push notification or Google Authenticator, from my React webapp.

I had the logic working well using the [factors API](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/UserFactor/#tag/UserFactor), but the Auth scopes required such as “okta.users.manage” are too powerful to allow the end-users to have access.

I’d really appreciate any advice on how I can trigger an MFA request before allowing users to access a particular area of my webapp.

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [August 19, 2025, 6:58pm UTC](https://devforum.okta.com/t/programatically-trigger-mfa-request/34150/2 "2025-08-19T18:58:45Z")

</div>

You may want to check out our guides and blog posts that discuss step-up authentication:

- [Step-up authentication using ACR values | Okta Developer](https://developer.okta.com/docs/guides/step-up-authentication/main/)
- [Step-Up Authentication Examples With Okta | Okta Developer](https://developer.okta.com/blog/2023/10/24/stepup-okta)
- [Step-up Authentication in Modern Applications | Okta Developer](https://developer.okta.com/blog/2023/03/08/step-up-auth)

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/oktadev/original/1X/589c4c5f80de422d01f47cee7185a7fb8227835c.png) [@system](https://devforum.okta.com/u/system)\
**Post date:** [September 18, 2025, 6:59pm UTC](https://devforum.okta.com/t/programatically-trigger-mfa-request/34150/3 "2025-09-18T18:59:41Z")

</div>

Closed on September 18, 2025, 6:59pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.