We are working moving beyond the default capabilities in the widget. Our policy does allow self-service capabilities, unlock and password reset using factors of sms or voice. We have also enabled MFA using a software token. Is it possible to establish the factor:software:totp as a self-service option?
At the moment, this is not possible as Okta does not have an API to reset the user’s password via TOTP. The available factors to reset the user’s password can be found here.
I have moved this topic to the feature requests section in order to increase it’s visibility to our engineering team and have it possibly implemented in a future release.