Does Okta support Passive authentication as a IDP? Skip to main content
https://support.okta.com/help/answers?id=906f0000000i0gaiak&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fanswers
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Ask Search:
apireadonly localapireadonly local 

Does Okta support Passive authentication as a IDP?

Eric KarlinskyEric Karlinsky (Okta, Inc.)
Hey Tien - Yes, Okta supports the Passive Federation flow by default.
Eric KarlinskyEric Karlinsky (Okta, Inc.)

Hey Tien - Since responding to this question, I've gained more context and I think I should elaborate on my response: Okta supports the passive federation flow for SAML authentication by default, which describes the SP-initiated SAML SSO flow. I've since learned that you're asking if Okta currently respects the isPassive flag in the SAML Assertion metadata. The desired behavior is that the IDP (Okta) to redirect back to the SP without prompting the end user for credentials, if a session is not currently established. The end user would then log in directly to the application on the SP side. Okta does nto currently honor this flag. Sorry for the confusion.

apireadonly localapireadonly local
More and more SaaS vendor supports Passive Authentication flow (with isPassive flag in AuthRequest) as out of the box feature. It improves end-user experience a lots because it recognizes the Okta session when user travel to Okta integrated applications without requiring the user to click on Login to initiate authentication request. I submitted enhancement requested here: https://support.okta.com/help/ideas/ideaList.apexp?c=09aF0000000Tj5M&lsi=1&lsr=10&u=005F0000005DwFL Thanks for the follow-up.
Miles EscowMiles Escow
Hi, do you have any news on this? The idea now has 130 votes and is indeed something that our organization needs as well. Can you tell us if development is considering this request? 
Also, by the way, ideas are very hard to find in this community. there is no navigation to them and the ideas don't show up in search results either.
apireadonly localapireadonly local
Hi Eirc, do we this feature scheduled on Okta short term roadmap?