Okta Mobile Safari Extension Skip to main content
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Okta Mobile Safari Extension
Published: Jan 31, 2018   -   Updated: Jun 22, 2018




Okta Mobile Safari Extension

The Okta Mobile Safari Extension extends Okta’s SSO product to Safari Web apps. If enabled, end users can access SWA and SAML apps directly in Safari, without having to open Okta Mobile.

  • When a mobile end-user receives a link via email, it typically opens in Safari. This extension allows them to quickly receive immediate access to their apps, even if they were not previously signed into their Okta Mobile account. User experience is improved with access to these deep links directly from an email.
  • End users can perform SP-initiated sign on to SWA and SAML apps in Mobile Safari.
  • Admins have the flexibility to enable or disable this function for SAML apps.

For the latest functionality, you must have iOS Okta Mobile v. 5.6 or above.

Admin Configuration

To enable the Okta Mobile Safari Extension,

  1. From the Admin Dashboard, click to the Security drop-down menu.
  2. On the drop-down menu, choose the General page.
  3. On the General page, scroll down to the Okta Mobile section.
  4. Under Okta Extension for iOS, note the Sign on to SAML apps check-box.


The Sign on to SAML apps check box allows the Safari Extension to share the Okta Mobile session with Safari. The allowed session lasts for 2 minutes, after which the session is dropped. Essentially, an end user can sign into SAML apps by entering only their Okta Mobile PIN, if Okta Mobile has a valid session with Okta.

This option is turned on by default, but can be disabled if you’d rather not allow seamless SAML access to Safari. If you choose to disable, please note that only SWA apps will be accessible via the extension. For end users, a message in their Safari mobile browser indicates that SAML apps are not supported.

End-User Configuration

To enable the Okta Mobile Safari Extension, end users must perform a one-time configuration.

  1. Tap the open-in button at the bottom of the Mobile Safari browser.


  1. Swipe right to reach the end of the options, then tap the More button.


  1. Locate the Okta Mobile Safari Extension, enable it, then drag it to the top of the list.


  1. The extension now appears when you tap the open-in button in Mobile Safari.


Using the Okta Mobile Safari Extension

If an end user is using Mobile Safari, they can use the extension to fill their sign on forms.

  1. In Mobile Safari, open the sign on page of an app, such as Atlassian Cloud. Click the open-in button.


  1. Select the Okta extension.


  1. Do the following, depending on whether you are signed into Okta Mobile or not:

    If signed into Okta

    • Confirm your Okta pin, then wait for your credentials to load.

    If not signed into Okta

    • The Okta sign on screen appears. Enter your credentials then, if configured, follow the MFA flow.
    • You are prompted to create, then confirm a new Okta PIN.
    • Wait for your credentials to load.
  1. Select the app sign on credentials.


  1. The credentials are auto-populated, and you are signed in.