<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
Use Okta System Log to See Who is Using Okta Mobile for Accessing Applications
Okta Classic Engine
Multi-Factor Authentication
Overview

Customers upgrading to Okta Classic Engine (OIE) will get a checklist about Okta Mobile, and they are required to transition end users from Okta Mobile to the browser dashboard since Okta Mobile is no longer supported in the Okta Identity Engine. This article will show how to check which users are using Okta Mobile to access applications.
NOTE: Only accessing applications from Okta Mobile will produce the logs presented in the solution. Accessing Okta Mobile alone will not generate the events presented below.
 

Applies To
  • Okta Classic Engine
  • Okta Mobile
  • Migration
Solution
  • The queries below can be used in the system logs to show all the events related to the Okta Mobile. All events related to Okta Mobile will use that application for the requests. The extended event logs will show something similar to the one below, depending on the device:
    • To see specific iOS and Android devices separately:
      • Search for Okta mobile on IOS:
        client.userAgent.rawUserAgent co "com.okta.ios.mobile"
      • Search Okta mobile on Android:
        client.userAgent.rawUserAgent co "Dalvik/2.1.0" and client.userAgent.rawUserAgent co "OktaMobile"

RawUserAgent

  • The search query will show all the events made by that agent:
    client.userAgent.rawUserAgent co "OktaMobile"

search query

  • To combine the search for both iOS and Android to make it easier for the search on all mobile devices: 
    (client.userAgent.rawUserAgent co "com.okta.ios.mobile") or (client.userAgent.rawUserAgent co "Dalvik/2.1.0" and client.userAgent.rawUserAgent co "OktaMobile")

search query

 
 
 
Loading
Use Okta System Log to See Who is Using Okta Mobile for Accessing Applications