Okta User Factor Report
This tool uses the Okta SDK to generate a CSV report on enrolled factor types for active or suspended users, helping IT and security admins quickly identify who has or hasn’t enrolled in MFA.
What is the use case?
I created this tool because regularly auditing your IdP is crucial for ensuring all users have at least one MFA factor enrolled. Rockstar and the built-in Okta admin console don’t offer a straightforward way to generate a report for this, making it harder to spot gaps that could lead to account takeovers. This tool bridges that gap by providing a clear, actionable report in just a few easy steps.
This tool is perfect if you're struggling to exceed Okta's API limit of 200 users—it pulls beyond 200 users with no limitations! 😎
Your API token and CSV data are never stored or transmitted to any servers. This tool runs entirely locally and only makes direct Okta API calls to Okta API endpoints—nothing leaves your machine. 🔒
Downloads
Don't be a fool—always verify the hashes before running anything. If the checksum doesn’t match, you might be downloading trouble. 🔥💀
OktaUserFactorReport_v1.1.0 for Linux and MacOS
OktaUserFactorReport_v1.1.0 for Windows
Read me!
What you'll need:
Know your Okta subdomain
Have an Okta API Token (make sure it has the proper permissions)
If you're on Linux or macOS, fire up your terminal and run this command—just make sure to replace /path/to with the actual path to your binary. ⬇️
If you're using Windows, just run the exe, and you'll see the CLI popup box.
If everything loads properly, this is what you'll see below. Answer the prompts, and the tool will work its magic!
Common mistakes that will lead to errors!
Incorrect Okta subdomain
Incorrect Okta API token value, or you pasted it incorrectly
The Okta account used to generate the API token lacks the necessary permissions to complete the task.
You were naughty and exceeded your Okta API limit!
Changelog
v1.1.0 - Minor Release (2025-02-15)
🚀 Added more details and updated data structuring
I added new columns to help admins see user enrollment factors more easily and restructured the CSV for better filtering. Users may appear multiple times since each of their factors is in its own row. See example CSV report below. I obfuscated some data for security, but your actual report will contain the real, unobfuscated data.
FIDO/webauthn are typically hardware security keys or passkeys
OKTA/signed_nonce are Okta Fastpass enrollments
v1.0.0 - Initial Release (2025-02-13)
🚀 New Features
Initial release of the project.
Packages Used
Last updated
