Okta's Detection of Desktop Browser Spoofing for Mobile Sign-On
May 30, 2025
Single Sign-On
Okta Classic Engine
Overview
This article discusses whether Okta will detect a mobile user spoofing a desktop browser for mobile sign-on.
Applies To
- Browser spoofing
- User Agent String
- Mobile Authentication
- Okta Classic Engine
Solution
The user agent headers are leveraged for the sign-on policies. If a user agent string is spoofed or stripped, Okta will not be able to determine the true or original user agent string and will use the information provided.
