1Password XAM - Device Assurance Policy in Okta

1Password XAM replaces the native Okta Verify FastPass mechanism for collecting device signals to evaluate Device Assurance policies. When 1Password XAM integrates into the authentication flow, typically as a possession factor or via Security Assertion Markup Language (SAML), the 1Password XAM agent independently evaluates the device posture against the requirements and returns a successful authentication to Okta. Because 1Password XAM handles signal collection and posture enforcement, Okta does not need to trigger FastPass to collect those same signals.

• Okta Identity Engine (OIE)
• Device Assurance
• 1Password XAM

What are the steps to configure 1Password XAM as a device posture system?

Install the 1Password XAM agent and configure a Device Assurance policy to replace the native Okta device posture system.

1. Install 1Password XAM.
2. Set up a Device Assurance Policy without requiring Okta Verify FastPass.
3. Use 1Password XAM to replace the native Okta device posture system.