Table of Contents Introduction Prerequisites Configure management attestation Download x509 certificate Create CA in Workspace ONE Add Certificate Template in Workspace ONE Create device profile for Okta Intermediate CA Create user profile to deploy the Okta CA-issued client certificate Verify the certificate installation (Windows) Verify the managed flag in Okta Introduction You can ensure that…
Table of Contents Introduction Prerequisites Configure management attestation Integrate Okta with Workspace ONE Create an SSO extension Profile Verify the managed flag in Okta Introduction You can ensure that devices are managed by an endpoint management(in my example Workspace ONE) tool before end users can access apps from the device. Devices are managed if they meet these conditions:…
Table of Contents Introduction Prerequisites Set up Device Access SCEP certificates Configure Okta as a CA for Device Access Download the x509 certificate from Okta Workspace ONE SCEP configuration Create a Certificate Authority Add a Certificate Template Create a device profile to deploy the Okta CA Create a user profile to deploy the Okta CA-issued client…
Introduction Remote and hybrid work is here to stay, so are all your devices secured? In recent weeks and months, I’ve written various blogs on the topic endpoint integration and security.In this blog post, I would like to briefly demonstrate once again with some demos how Okta can help with this from enrollment to logging on to the device and accessing…
Okta Desktop MFA for macOS adds an extra layer of security to the macOS sign-in process by asking users for additional authentication before allowing computer access. In this blog we show you how to configure Desktop MFA in the Okta Admin Console, and then deploy it through VMware Workspace ONE. Technical Prerequisites Create and configure the Desktop MFA app integration In the Admin Console,…
October 2024: The Okta application name from “Desktop Password Sync” to“Platform Single Sign-On for macOS” April 2025: Additional app identifier required for the associated domain entry on macOS 15 Sequoia (mobileconfig template was updated) Introduction With macOS Ventura, Apple introduced Platform SSO, which enables developers to create a single sign-on (SSO) extension that interacts directly with the macOS login…
August 2024: This is an Early Access Feature Table of Contents Introduction Prerequisites Enable Device Recovery Configure Device Recovery Omnissa Workspace ONE UEM Jamf Pro Kandji Microsoft Intune Request a Device Recovery PIN Demo Request a Device Recovery PIN Create Device Recovery PIN Demo Create Device Recovery PIN Demo Desktop MFA Admin Recovery Conclusion Introduction…
Table of Contents Introduction Prerequisites Configure Allowed Factors MDM policy Omnissa Workspace ONE UEM Jamf Pro Kandji Microsoft Intune Demo Introduction Admins can now control which verification methods users are permitted to authenticate with by configuring a new registry value called AllowedFactors.This provides greater flexibility in managing authentication options within the system. Prerequisites Configure Allowed Factors…
Table of Contents Introduction Prerequisites Okta Omnissa Omnissa configuration Configure Security Events in Omnissa Workspace ONE UEM Compliance policies Okta Identity Threat Protection Configuration Configure the shared signal receiver Entity Risk Policy Policy Structure and Evaluation Actions Based on Matching Rules Add an entity risk policy rule for Universal Logout Add an entity risk policy…