This article describes how to block the Okta sign-on page from loading within defined network zones.

• Blocklist
• Network Zones
• Okta Sign On/Login Page

1. Log in to the Admin Console.

2. Navigate to Security > Networks.

3. Click the Add Zone button.

4. The Admin can select Dynamic Zones or IP Zone.

   5. Select the option Block access from IPs matching conditions listed in this zone.

   6. Click Save.

NOTE: One significant benefit of using the Blocklist zone is that it can help prevent brute-force attacks from defined networks/locations without locking out end-user accounts, as attackers can not even load the Org sign-in page from blocklisted networks (and therefore do not have an opportunity to enter the invalid credentials).

Related References

• Create zones for IP addresses for Okta Classic Engine
• Create zones for IP addresses Okta Identity Engine (OIE)
• Dynamic/IP Zone Blocking Does Not Work - Sign-in Page Still Accessible