# Widget MFA enrollment

**URL:** <https://devforum.okta.com/t/widget-mfa-enrollment/12863>\
**Category:** Questions\
**Tags:** widget\
**Created:** [February 10, 2021, 2:15pm UTC](https://devforum.okta.com/t/widget-mfa-enrollment/12863 "2021-02-10T14:15:57Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![klaus.hauschild.xom](https://avatars.discourse-cdn.com/v4/letter/k/77aa72/32.png) [@klaus.hauschild.xom](https://devforum.okta.com/u/klaus.hauschild.xom)\
**Post date:** [February 10, 2021, 2:15pm UTC](https://devforum.okta.com/t/widget-mfa-enrollment/12863/1 "2021-02-10T14:15:57Z")

</div>

Hey there,

we are using the Okta sign-in Widget for authentication.  
We would like to give our customers the decision if they want to enroll a MFA or not. The use case goes as follows: customer registers and customer logs in. Within the user session, a customer should have an action to just enroll MFA, best via the Widget. Is there a way to bypass the need to log out, “activate” MFA enrollment and let him log in again and handle the enrollment there?

Many thanks

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [February 12, 2021, 8:55pm UTC](https://devforum.okta.com/t/widget-mfa-enrollment/12863/2 "2021-02-12T20:55:01Z")

</div>

Are you trying to avoid having the user do this via the Okta UI? Once a user is created, they can enroll in MFA factors themselves by going the the **Settings** menu from the end-user dashboard: [https://oktaDomain/enduser/settings](https://oktaDomain/enduser/settings)

If you want to do this via your own UI, you will not be able to do so via the widget unless the user meets the criteria for MFA enrollment, based on your policies.

 ![Screen Shot 2021-02-11 at 10.31.23 AM](https://global.discourse-cdn.com/oktadev/original/2X/3/346cc61a5b733baa75a66aa084b7fbd36a1380d7.png)

You may want to look into making these API calls directly using our [Factors API](https://developer.okta.com/docs/reference/api/factors/) so that you can enroll users in enabled factors.

---

<div class="post-metadata">

**Author:** ![klaus.hauschild.xom](https://avatars.discourse-cdn.com/v4/letter/k/77aa72/32.png) [@klaus.hauschild.xom](https://devforum.okta.com/u/klaus.hauschild.xom)\
**Post date:** [February 14, 2021, 11:43am UTC](https://devforum.okta.com/t/widget-mfa-enrollment/12863/3 "2021-02-14T11:43:11Z")

</div>

I am aware of this option the “force” the user to do this along with his regular login, dependent on our security configuration.

I am looking at the situation where the user is already logged in and now I want to give him the option to enroll. This can be achieved via logout/login or explicit API calls. I am asking if there is an option in the widget to initialize it directly in this mode like password recovery.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/oktadev/original/1X/589c4c5f80de422d01f47cee7185a7fb8227835c.png) [@system](https://devforum.okta.com/u/system)\
**Post date:** [January 26, 2024, 7:27pm UTC](https://devforum.okta.com/t/widget-mfa-enrollment/12863/4 "2024-01-26T19:27:12Z")

</div>

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.
