diff --git a/rules/cloud/okta/okta_user_account_mfa_bypass_attempt.yml b/rules/cloud/okta/okta_user_account_mfa_bypass_attempt.yml
new file mode 100644
index 000000000..41a74b121
--- /dev/null
+++ b/rules/cloud/okta/okta_user_account_mfa_bypass_attempt.yml
@@ -0,0 +1 @@
+NOT READY YET