Skip to content

This tool is not affiliated with, endorsed by or sponsored by Okta, Inc. Okta is a trademark of Okta, Inc. Other names are trademarks of their respective owners.

Glossary

Number challenge (Okta Verify)

An Okta Verify push option that makes the user pick the number shown on the sign-in screen, so a push cannot be approved blindly.

Number challenge is Okta's form of number matching for Okta Verify push. Instead of simply tapping Approve, the user must select, on the phone, the number displayed on the sign-in screen. Someone who did not start the sign-in cannot know the number, which blunts MFA fatigue. Administrators can require it never, only for high-risk sign-ins, or for every push (Okta Help Center). CISA recommends number matching as an interim step for organisations still using push MFA (CISA fact sheet). It does not stop adversary-in-the-middle phishing; phishing-resistant MFA does.

This tool is not affiliated with, endorsed by or sponsored by Okta, Inc. Okta is a trademark of Okta, Inc. Other names are trademarks of their respective owners.