diff --git a/changelog/15369.txt b/changelog/15369.txt
new file mode 100644
index 000000000000..b27c004a87d1
--- /dev/null
+++ b/changelog/15369.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+mfa/okta: disable client side rate limiting causing delays in push notifications
+```
\ No newline at end of file
diff --git a/vault/login_mfa.go b/vault/login_mfa.go
index 0976482b8368..6d6163cedbdb 100644
--- a/vault/login_mfa.go
+++ b/vault/login_mfa.go
@@ -1825,6 +1825,8 @@ func (c *Core) validateOkta(ctx context.Context, mConfig *mfa.Config, username s
 	} else {
 		client = okta.NewClient(cleanhttp.DefaultClient(), oktaConfig.OrgName, oktaConfig.APIToken, oktaConfig.Production)
 	}
+	// Disable client side rate limiting
+	client.RateRemainingFloor = 0
 
 	var filterOpts *okta.UserListFilterOptions
 	if oktaConfig.PrimaryEmail {