Terraform is used to create an authentication policy. After applying the first run, the following error message is encountered:

Error: failed to create app sign on policy rule: the API returned an error: Api validation failed: conditions.device. Causes: errorSummary: conditions.device: To create a policy rule using advanced device attributes, contact Okta Support

• Adaptive Multi-Factor Authentication (MFA)
• Okta Identity Engine (OIE)
• Authentication Policies
• Terraform

This error is seen because the following condition is being used: 

device_is_managed = true

To leverage the managed device condition within authentication policies, the Adaptive MFA SKU is required. The managed device condition is a feature that utilizes contextual signals, such as the device's management status (via integration with a Mobile Device Management, like Intune or Jamf).

Please contact the Account Executive to have the Adaptive MFA SKU license added.

Related References

• MFA vs. Adaptive MFA