How to Add a Behavior to a Sign-On Policy Rule
Nov 14, 2025
Administration
Okta Classic Engine
Okta Identity Engine
Overview
Applies To
- Okta Classic Engine
- Behaviors
- Sign-On Policy
Solution
- In the Admin Console, go to Security > Authentication.
- Select Sign On.
- Click Edit rule next to the rule to which the behavior should be added.
- In the And behavior is field enter the name of an existing behavior that was previously created. Start entering a behavior name. A dropdown of all matching defined behaviors appears from which the behavior should be selected.
- If multiple behaviors are added, they are considered as "OR" conditions.
- When added, these behaviors are evaluated along with any other items defined in the rule.
- Specify the allowed condition in the Then access is section. User's access cannot be denied based on behavioral conditions. This limitation helps prevent legitimate users from being locked out of their accounts. They are only denied access if Multi-Factor Authentication fails.
- Click Create Rule.
