Okta FastPass is a device-bound authenticator, meaning Okta Verify does not transfer or send authentication prompts from one device to another. This security feature prevents remote phishing attacks. To authenticate on a different device, the user must enroll the second device in Okta Verify. If a user requires cross-device authentication, they must use a different authentication method, such as Okta Verify Push.
- Okta FastPass
- User Authentication
- Okta Identity Engine (OIE)
- Multi-Factor Authentication (MFA)
Why does Okta FastPass restrict prompts to a single device?
Okta FastPass is a device-bound authenticator. To prevent remote phishing, Okta FastPass restricts authentication to the originating device. By design, Okta Verify does not send Fastpass prompts from one device to another.
How is cross-device authentication achieved?
If a user needs to initiate authentication on one device and complete it on another, they must use a different authentication method, such as Okta Verify Push.
How does a user enroll a second device into Okta FastPass?
Enroll a second device into Okta FastPass by opening the Okta Verify application on the primary device and selecting the option to add the account to another device.
- Open the Okta Verify application on the primary device.
- Select the account that requires a second device enrollment.
- Scroll to the Manage Account section and select Add Account to Another Device, then follow the instructions to complete the account transfer.
