Linux Okta Verify Incorrectly Reports SYSTEM_VOLUME for diskEncryptionType
Last Updated:
Overview
The Okta Verify app for Linux (LOV) incorrectly reports SYSTEM_VOLUME as the diskEncryptionType because of a bug in disk encryption detection logic. When an Authentication Sign-On Policies (ASOP) evaluates an Okta Expression Language (OEL) expression that uses the diskEncryptionType, the incorrect value causes improper evaluation. To resolve this issue, temporarily exclude this OEL check from the ASOP until Okta deploys a fix in a future release.
Applies To
- Okta Identity Engine (OIE)
- Okta Verify for Linux
- Authentication Sign-On Policies (ASOP)
- Okta Expression Language (OEL)
Cause
The Okta Verify app for Linux contains a bug in the disk encryption detection logic that incorrectly reports SYSTEM_VOLUME as the diskEncryptionType, preventing Okta from reflecting the actual disk encryption status of the machine.
Solution
How is the incorrect disk encryption type reporting resolved?
Temporarily exclude the diskEncryptionType Expression Language check from the Authentication Sign-On Policies. Okta plans to resolve the issue in a future release.
