Does Okta support Device based MFA rules Skip to main content
https://support.okta.com/help/answers?id=906f0000000xzj4iao&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fanswers
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Ask Search:
Mukund PareekMukund Pareek 

Does Okta support Device based MFA rules

Wanted to understand if Okta supports MFA when there is a change in User's device?

For example: How can we use Device Tokens to prompt users for MFA?

Can you point me to some revelant documentation regarding the same.
Wils DawsonWils Dawson (Okta, Inc.)
Hi Mukund,

We do have an option to only prompt for MFA once per device. This is based on a device token that is set if a user selects the "Remember Me" option. Is that the kind of thing you're looking for? Or is your use case more nuanced?

As for documentation, it will depend on whether you have Okta's new Sign-On Policies that are group based. For application level MFA see this doc (https://support.okta.com/help/articles/Knowledge_Article/29121426-Configuring-Application-Level-Multifactor-Authentication) and select the "Only Once" option.

Hope that helps!

Thanks,
Wils