Siteminder Okta MFA Integration

I’m upgrading our Symantec IAM stack in Australia and need someone who has already bolted modern MFA onto legacy Siteminder realms. The immediate task is to retire our HTML form-based login and introduce Okta-driven MFA without disrupting the current user journey.

Our environment runs Symantec Directory, Siteminder Policy Server/Web Agents, and Identity Manager protecting a mix of Java and .NET apps. The most critical driver is security enhancement, yet the finished flow must feel seamless and transparent to every user of our internal and customer-facing portals.

You’ll be hands-on with:
• Siteminder authentication schemes, FCC/WCC pages, session cookies, and header injection
• Okta SAML/OIDC, Adaptive MFA policies, and (ideally) the Okta Access Gateway
• The quirks of integrating MFA into existing Broadcom Directory and Identity Manager workflows

What I need from you
1. A concise design explaining how Okta MFA fits into our current login, session, and logout processes—cover fail-over and rollback.
2. A working PoC in non-prod, fully scripted for repeatability.
3. Production cut-over assistance, including test scripts that prove:
• Okta challenges every first-factor login,
• the user experience adds no more than one extra step, and
• all apps protected by Siteminder remain unchanged.
4. Final documentation and hand-over so my internal team can operate the solution.

If you’re comfortable tuning Siteminder auth schemes, crafting SAML/OIDC trust with Okta, and keeping the login journey friction-free while boosting security, I’d love to see how you can help.