Users who gain access to Okta through a global session policy do not automatically have access to applications. Administrators can create a unique Okta Authentication Policy for each application in the organization or share a single policy across multiple applications. Add an Authentication Policy in the Okta Admin Console by navigating to the Authentication Policies page, defining the rules, and assigning the desired applications.

• Okta Identity Engine (OIE)
• Authentication Policy
• Multi-Factor Authentication (MFA)

How is an Okta Authentication Policy added?

Create a new authentication policy, configure the policy rules, and assign applications to the policy in the Okta Admin Console.

1. Sign in to the Okta Admin Console.
2. Go to Security > Authentication Policies, and select App sign-in.
3. Select Create policy.
4. Enter a name and description for the policy, then select Create policy. NOTE: A Catch-all Rule is included by default.
5. Select Add rule and enter a name for the new rule.
6. Complete the remaining options for the use case, then select Save.
7. Select the Applications tab, and choose Add app to assign one or multiple applications to the authentication policy.

NOTE: Use the Access Testing Tool to verify whether the policy functions as expected.

Related References

• Authentication Policies
• Global Session Policies
• Access Testing Tool