Administrators may need to identify and generate a comprehensive list of all users actively enrolled in Okta FastPass via the Okta Verify for Desktop application on Windows and macOS. This data assists with security auditing, compliance reporting, and tracking the success of passwordless migration strategies. Query the System Log in the Okta Admin Console to generate this list.
- Okta Identity Engine (OIE)
- Okta FastPass
- Okta Verify for Desktop on Windows or macOS
- Multi-Factor Authentication (MFA)
What query generates a list of users enrolled in Okta FastPass via desktop Okta Verify?
Query the System Log in the Okta Admin Console and export the results to generate a list of users enrolled in Okta FastPass on Windows or macOS.
- Access the Okta Admin Console.
- Navigate to System Log.
- Enter the following query to filter for FastPass enrollments on desktop devices and return users who activated the Signed Nonce factor specifically on a computer:
eventType eq "user.mfa.factor.activate" and outcome.reason eq "User set up SIGNED_NONCE factor" and client.device eq "Computer"- Export the results as a CSV file for further analysis.
NOTE: Okta retains System Log data for 90 days. For longer retention, export System Log data to a secure location or third-party application to adjust data retention periods. Refer to the How to Export Okta Log Data documentation. Alternatively, use the prebuilt MFA usage report. Note that this report does not provide a filter based on platform and includes both mobile and desktop devices. The report categorizes FastPass as "Signed Nonce".
