If enrolling an sms, allow updating the verified phone # #112
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Problem Analysis (Technical)
Users were locked to only being able to use one phone number for MFA SMS. You get a 400 from the authn api when providing a different phone number than the verified phone during MFA SMS enrollment.
Solution (Technical)
On an sms mfa enrollment request add the updatePhone query parameter
Affected Components
OktaAPI enrollFactor method
Steps to reproduce:
Enroll MFA SMS for a user, reset MFA SMS. Enroll in MFA SMS again with a different phone number.
Actual result:
You get a 400 and can only do MFA SMS with the first verified phone number
Expected result:
You can enroll with a different phone number
Tests