May 2026: This is an Early Access release Table of Contents Introduction Requirements Okta Requirements MDM & Profile Requirements Required Configuration Profiles Seeing is Believing: Okta Device Access in Action Demo – Manual Secure Enclave Registration for Already Enrolled Devices Demo – Simplified Setup for Platform SSO with Secure Enclave Seamless Migration – From Password…
Introduction Configuring the Okta PSSO App in the Admin Console Introduction Implementing Okta Platform Single Sign-On (PSSO) is a critical step toward unifying endpoint security and cloud identity management for your macOS fleet. By leveraging Apple’s Extensible Enterprise SSO framework, the Okta PSSO Application establishes a secure, native bridge between the local macOS login window and the…
Table of Contents Introduction Jamf Pro – Dynamic SCEP Configuration Okta – Dynamic Device Access SCEP Certificate Configuration Jamf Pro SCEP Profile Configuration Create a dynamic SCEP profile in Jamf Pro Introduction Because every IT environment relies on a different device management stack, certificate delivery looks slightly different depending on your tooling. This post is the…
Introduction Demos macOS Demo – The Device-Bound SSO Experience Windows Demo: TPM-Backed Productivity Early Access Feature Activation Creating the DBSSO Authentication Rule Implementing Device-Bound Single Sign-On on macOS macOS Prerequisites Implementing the Configuration in Jamf Pro Implementing the Configuration in Microsoft Intune Implementing Device-Bound Single Sign-On on Windows Windows Prerequisites Desktop MFA policies for Windows…
Okta Desktop MFA Configuration In the Admin Console, go to Settings, Account, Embedded widget sign-in support.And ensure that the Interaction Code checkbox is selected. Now navigate to Applications –> Applications, click Browse App Catalog and search for Desktop MFA. Click Add integration Retrieve the Client ID and Client secret, these will be required during deployment. Set the Application username format to match your organization’s requirements (e.g., user principal name for Azure…
Table of Contents Okta PSSO Setup and Integration Setting Up the Okta PSSO Application Okta PSSO Setup and Integration In this section, we will cover the initial steps for configuring the Okta PSSO application and establish the necessary SCEP (Simple Certificate Enrollment Protocol) configuration. Setting Up the Okta PSSO Application Navigate to Applications > Applications. In the application catalog, search for Platform….
Table of Contents Introduction Prerequisites Configure management attestation Download x509 certificate Create CA in Workspace ONE Add Certificate Template in Workspace ONE Create device profile for Okta Intermediate CA Create user profile to deploy the Okta CA-issued client certificate Verify the certificate installation (Windows) Verify the managed flag in Okta Introduction You can ensure that…
Table of Contents Introduction Requirements Configure Okta Verify Number Challenge Sign in overview Demo Introduction In the latest Early Access Okta Verify Release for (4.8.1) Okta now supports Push notification (number challenge) for Okta Device Access Desktop MFA. Users can choose whether to include a number challenge with an Okta Verify push notification.The number challenge verifies that a sign-in attempt to an app protected…
Table of Contents Introduction Prerequisites Create/Adjust Desktop MFA Policies Configuration steps Self-service password reset overview Demo (AD Users) Introduction Self-service password reset allows your users to initiate a password reset if they’re locked out of the computer. Self-service password reset requires users to be online.Users can’t initiate a password reset without an internet connection. The self-service…
Table of Contents Introduction Requirements Configure Okta Verify Number Challenge Sign in overview Demo – macOS Number Challenge Introduction In the latest Early Access Release (9.8.0) of Okta Verify for macOS Okta now also supportsPush notification (Number challenge) for macOS Okta Device Access Desktop MFA.Check here the full release notes. Users can choose whether to include a number challenge with an Okta Verify push notification.The number challenge verifies that…