Understanding the Priority of Okta Sign-On Policies Versus App Sign-On Policies
Last Updated:
Administration
Okta Classic Engine
Okta Identity Engine
Overview
Okta evaluates sign-on policies in a specific order when an application launches. In Okta Classic Engine, Okta evaluates the Okta sign-on policy before the Application sign-on policy. In Okta Identity Engine (OIE), Okta evaluates the Global Session Policy before the Authentication policies.
Applies To
- Okta Classic Engine
- Okta Identity Engine (OIE)
- Sign-On Policies
- Authentication Policies
Solution
How does Okta prioritize sign-on policies during application launch?
In OIE, Okta evaluates the Global Session Policy before the Authentication policies.
In Okta Classic Engine, Okta evaluates the Okta sign-on policy before the Application sign-on policy.
