How to stop attackers from self-serving their way into accounts

**Executive summary:** The report explains how Okta account management policies (AMPs) can be used to harden authenticator enrollment and recovery against social-engineering attacks by requiring phishing-resistant factors, restricting self-service to trusted IPs, adding additional verification steps, and using pre-registered physical security keys or identity-verification services for recovery.