Okta Verify FastPass Support on Shared Workstations
Last Updated:
Overview
Administrators configuring Okta Verify FastPass on shared hardware must choose the correct deployment model based on the device type. Shared workstations and kiosk devices require specific configurations to ensure secure separation between users. Implement Device Posture Sensor Mode or individual user accounts to support Okta Verify FastPass on shared devices.
Applies To
- Multi-Factor Authentication (MFA)
- Okta Verify for Windows
- Okta Verify for macOS
- Okta Identity Engine (OIE)
Solution
How is Okta Verify FastPass configured for shared and kiosk devices?
Secure shared and kiosk devices by implementing Device Posture Sensor Mode and configuring Near Field Communication with a Personal Identification Number.
- Deploy Device Posture Sensor Mode for devices where multiple people share the same local user credentials (shared user profile).
- Configure Near Field Communication (NFC) and a Personal Identification Number (PIN) to authenticate frontline workers.
Shared Workstations Require Individual User Accounts When Sensor Mode Is Unavailable
Administrators should deploy Device Posture Sensor Mode on shared workstations whenever possible. If Sensor Mode is unavailable, configure the shared workstation by ensuring each user maintains an individual user account on the device. Okta Verify segments enrollments by the user account signing in during enrollment. When multiple people sign in to the machine with different user credentials, Okta Verify hides the accounts of other users.
