OpenVPN Okta 2FA/MFA integration and user management.

[AlexMercer]

Hey,

I've searched around for a tutorial or guide or any relevant experience from technical implementation of OpenVPN on pfSense and Okta integration.

My goal is to have MFA/2FA with a push notification from Okta. We have a pfSense cluster with OpenVPN that provides connectivity for our employees and we would love to harden security a bit, hence 2FA/MFA.
The current implementation has user certs + username and password, but it's not as convenient as a push notification :)

Please share your experience and knowledge on the matter.
Any input is welcome.
Thank you!