Configuring an Enhanced dynamic zone in Okta restricts tenant access to specific geographic locations. This configuration allows access exclusively from designated countries while blocking all other locations.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Security
• Enhanced Dynamic Zone

What are the steps to configure an Enhanced dynamic zone to restrict access by country?

Navigate to the network security settings in the Admin Console to create a new Enhanced dynamic zone, configure the blocking conditions for the network zone, and specify the allowed countries to restrict tenant access.

1. In the Okta Admin Console, navigate to Security > Network.
2. Select Add zone > Enhanced dynamic zone.
   
3. Enter a name for the network zone.
4. Select the Block access from IPs matching conditions listed in this zone checkbox.
5. Under Locations, select the All locations except option.
6. Add the countries permitted to access the Okta tenant.
   

NOTE: This configuration restricts access to only the selected countries.

Related References

• Create an enhanced dynamic zone