How can I limit MFA to only non-OTKA federated users

Hi @kpaynter

Please check out this knowledge article regarding the matter:

Since you want only OKTA users to bypass the MFA, you will need to set your MFA policy to Never so that you can enforce the MFA for only the Auth0 users whenever they log in.

You can read more about Customized MFA here.

Hope this helps! If you have any other questions, feel free to let me know!

Kind Regards,
Nik