# 2FA, step by step

**URL:** <https://forum.inductiveautomation.com/t/2fa-step-by-step/63257>\
**Category:** Ignition\
**Tags:** ignition80\
**Created:** [August 22, 2022, 8:27am UTC](https://forum.inductiveautomation.com/t/2fa-step-by-step/63257 "2022-08-22T08:27:31Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![ISEMAREN\_AAG](https://avatars.discourse-cdn.com/v4/letter/i/82dd89/32.png) [@ISEMAREN\_AAG](https://forum.inductiveautomation.com/u/ISEMAREN_AAG)\
**Post date:** [August 22, 2022, 8:27am UTC](https://forum.inductiveautomation.com/t/2fa-step-by-step/63257/1 "2022-08-22T08:27:31Z")

</div>

Good morning.

I’d like to set up **2FA** on Ignition with an identity provider like OKTA.  
I have read the documentation but there is no step by step guide how to do it for 2FA.

Can someone who has done it help me, please?

Best Regards.

---

<div class="post-metadata">

**Author:** ![apalas](https://avatars.discourse-cdn.com/v4/letter/a/e47774/32.png) [@apalas](https://forum.inductiveautomation.com/u/apalas)\
**Post date:** [September 1, 2022, 8:13pm UTC](https://forum.inductiveautomation.com/t/2fa-step-by-step/63257/2 "2022-09-01T20:13:11Z")

</div>

Hi,

Just to make sure, have you already checked this example below?

[https://docs.inductiveautomation.com/display/DOC81/OpenID+Connect+1.0+Example](https://docs.inductiveautomation.com/display/DOC81/OpenID+Connect+1.0+Example)

Best,

---

<div class="post-metadata">

**Author:** ![ISEMAREN\_AAG](https://avatars.discourse-cdn.com/v4/letter/i/82dd89/32.png) [@ISEMAREN\_AAG](https://forum.inductiveautomation.com/u/ISEMAREN_AAG)\
**Post date:** [September 2, 2022, 8:01am UTC](https://forum.inductiveautomation.com/t/2fa-step-by-step/63257/3 "2022-09-02T08:01:49Z")

</div>

Hello.  
Yes, I have seen that example, but it does not explain how to configure 2FA (enter a code sent by SMS or email, or Google Authenticator).  
I understand that this is configured in the identity provider and that is why it is not explained in that tutorial.

Thanks.

Best Regards.

---

<div class="post-metadata">

**Author:** ![wdougmiller](https://avatars.discourse-cdn.com/v4/letter/w/a9a28c/32.png) [@wdougmiller](https://forum.inductiveautomation.com/u/wdougmiller)\
**Post date:** [December 26, 2022, 5:02pm UTC](https://forum.inductiveautomation.com/t/2fa-step-by-step/63257/4 "2022-12-26T17:02:06Z")

</div>

@ISEMAREN_AAG I believe the 2FA configuration is entirely held inside your selected auth source, Okta in your situation. Ignition is only facilitating the initiation of the authentication, once your selected auth source has concluded the its authentication (whatever steps you configure in that auth source), it will provide a response document. At that stage Ignition can parse out the response document.

I could be wrong here, but I would look into your Okta administration to enable and setup 2 factor authentication.

[https://docs.inductiveautomation.com/display/DOC80/SAML+Example](https://docs.inductiveautomation.com/display/DOC80/SAML+Example)