The company said it plans to take a “phased approach” to the rollout, with the system initially preventing the creation of new admin app authentication policies without MFA, Okta said.