Enrolled MFA factors for a user.

Table Specific Information

Required Scopes

To query this table, Scope must include okta.users.read. To edit this table, it must include okta.users.manage.

Select

The driver uses the Okta API to process WHERE clause conditions built with the following columns and operators.

• Id supports the '=' operator
• UserId supports the '=' operator

All other filters are processed client-side within the driver.

For example, the following query is processed server-side:

SELECT * FROM UserFactors WHERE UserId='00ub0oNGTSWTBKOLGLNR'

Insert

At minimum the UserId and FactorType are required to insert into this table. Performing an insert will enroll the factor and set its status to either PENDING_ACIVATION or ACTIVE.

A sample Insert is given below.

INSERT INTO UserFactors (UserId, FactorType) VALUES ('00ukvjvlmiW2v3C6l5d7', 'token:software:totp')

Update

Updates are not supported for this table

Delete

A sample Delete is given below.

DELETE FROM UserFactors WHERE UserId = '00ukvjvlmiW2v3C6l5d7' AND Id = 'ostmblu3dxwQE6lSN5d7'

Columns

Name	Type	ReadOnly	Description
Id [KEY]	String	True	Id of the factor
FactorType	String	False	Type of factor
Provider	String	False	Factor provider
VendorName	String	True	Factor vendor name
Status	String	True	Status of the factor
Created	Datetime	True	When the item was created
LastUpdated	Datetime	True	When the item was last updated
Answer	String	False	Answer to the question. Only in Question factors.
Question	String	False	Unique key for the question. Only in Question factors.
QuestionText	String	True	Display text for the question. Only in Question factors.
PhoneNumber	String	False	Phone number for the device. Only in Call and SMS factors.
PhoneExtension	String	False	Extension of the device. Only in Call factors.
CredentialId	String	False	Credential Id. Only in Web and Token factors.
Email	String	False	Email address of the user. Only in Email factors.
UserId	String	False	User Id