Hi All ,
I have an Access control policy , which prompts for Email OTP MFA whenever users login .
I have also attached this to the protected resource .
The issue is it works well for the first time , but the next logins the user without prompting for MFA .
I have the below info set up
Could any one help me why this is happening ? Am I missing any config?
Thanks and Regards,
Gomathy Sethusankar
Security Consultant
Managed Security Services
Mobile: +91-9901508141
gsethusa@in.ibm.com
IBM Security