Okta Do Not Challenge Me On This Device Option Fails In Safari
Last Updated:
Overview
The Okta "Do not challenge me on this device for a number of days" option fails to function in the Safari browser due to the Prevent cross-site tracking feature. Disabling the cross-site tracking feature in the Safari privacy settings resolves the issue. When attempting to use the prompt to bypass Multi-Factor Authentication (MFA) on a trusted device, Safari prevents the login feature from working correctly.
Applies To
- Okta Classic Engine
- Multi-Factor Authentication (MFA)
- Adaptive MFA
- Safari
Cause
Safari utilizes a Prevent cross-site tracking feature that interferes with the Okta device trust cookie. This cross-site tracking prevention stops websites and login features from functioning correctly.
Solution
What steps disable the Safari cross-site tracking feature?
Disable the cross-site tracking feature in the Safari privacy preferences and reload the affected page to resolve the issue.
- Open Safari.
- In the Menu bar, select Safari and choose Preferences....
- Select Privacy and clear the box next to Prevent cross-site tracking.
- Close the window and reload the affected page.
