I can't enable MFA for Oracle Identity Cloud Service user

Question

I just sign-up an account of Oracle Cloud

After I logged in, It seem the system automatically created a tenancy for me and added me to an Identity Providers named oracleidentitycloudservice.

They also create one more user starts with oracleidentitycloudservice/username.
This is identity user page, both 2 of them is me. One of them is federated with oracleidentitycloudservice which is created automatically.

I can enable MFA for the second account.
But I can not enable MFA account for oracleidentitycloudservice/username:

When I want to login to Identity Console page, I need to use this SSO method:

It seem risky if Identity Console page doesn't provide MFA feature. That's what I worry about.

Question is:

1. Is it safe if I delete oracleidentitycloudservice/username?
2. How can I enable MFA for oracleidentitycloudservice/username from Oracle Infastructure page?
3. If Oracle is providing a complicated way to enable MFA for oracleidentitycloudservice/username, could it be a security issue?

Answer 1

For those who are in the same situation, here is step to Enable MFA for Oracle Identity cloud service user:

1. Sign in by this SSO method at this screen:
   

2. Go to Service User Console on top-right screen
   

3. Go to Admin Console of Identity
   

4. Go to My profile on top-right screen

5. Go to Security tab, our goal is to give the account permissions so that MFA item shows on this screen. At this moment MFA is not yet enabled, move to next step

6. Go to Admin console at top-right screen

7. Go to Security -> MFA at left side panel, check the box Mobile App Passcode

8. Go to Security -> Sign-On Policies, edit the Default Policy

9. Edit Default Sign-on Rule

10. Select the option that you prefer. It's upto you.
    

11. Go to Security tab and here you can enable MFA for your IDCS account

12. Sign-out and Sign-in again. Now you can use MFA to login.