If enrolling an sms, allow updating the verified phone #

[Dozer1170]

Problem Analysis (Technical)

Users were locked to only being able to use one phone number for MFA SMS. You get a 400 from the authn api when providing a different phone number than the verified phone during MFA SMS enrollment.

Solution (Technical)

On an sms mfa enrollment request add the updatePhone query parameter

Affected Components

OktaAPI enrollFactor method

Steps to reproduce:

Enroll MFA SMS for a user, reset MFA SMS. Enroll in MFA SMS again with a different phone number.

Actual result: You get a 400 and can only do MFA SMS with the first verified phone number Expected result: You can enroll with a different phone number

Tests

[IldarAbdullin-okta]

Thanks a lot for the contribution, @Dozer1170 ! Could you please create github issue so I can prioritize it? Your fix looks good, however I would like to expose this flag to public API so application level can decide whether to allow phone update or not

[Dozer1170]

@IldarAbdullin-okta I have created the bug report for this. Let me know if you need anything else on my end!