How to set up provisioning with MFA enabled

[nagaryu]

Currently, a customer has configured SAML2.0 SSO with Okta as the IdP, and is also trying to set up provisioning with ServiceNow on the Okta administration screen.

However, the customer contacted us to say that "Because MFA is enabled on the ServiceNow side, basic authentication cannot be used when provisioning from Okta, and the process fails."
As a test, the customer said that they tried temporarily disabling MFA in ServiceNow, and provisioning was successful.

I am in charge of the ServiceNow side, so could you please tell me what settings I need to make on the ServiceNow side in this case to allow provisioning while keeping MFA enabled?

For example, I imagine that it may be necessary to set up MFA exceptions as described in the following document, or to create a dedicated user to use when connecting from Okta, but I am not very familiar with provisioning, so please forgive me if there are any errors in my question.

https://www.servicenow.com/docs/bundle/yokohama-platform-security/page/integrate/authentication/conc...

[Vishal Jaswal]

Hello @nagaryu 

Found this guide (might be helpful): https://help.okta.com/en-us/content/topics/provisioning/servicenow/oktaidentityclouddeploymentguide....

[nagaryu]

Thank you for the information.

There is a lot of text, so it may be difficult to find the relevant part, but I will check the contents first.