ORA-28480
The multi-factor authentication clause is only allowed when the database manages the password
Cause
The ADD FACTOR, UPDATE FACTOR, and DROP FACTOR clauses are not allowed for users that are IDENTIFIED EXTERNALLY, IDENTIFIED GLOBALLY, or are configured with NO AUTHENTICATION.
Action
Perform the ALTER USER operation with the multi-factor authentication clause only for users configured to use password authentication (i.e., where the AUTHENTICATION_TYPE in DBA_USERS is "PASSWORD").