Try to use yubikey for auth. Also get this error while using Okta Push. I get this error whether querying creds or trying running "--action-setup-fido-authenticator" > Challenge with security keys ... > Please enter PIN: > > Touch your authenticator device now... > > Received WebAuthn token response > You must enroll in MFA before using this tool. But I have enrolled in MFA. It's enforced on my org for all authentication.