Okta Verify for Windows Requires Windows Hello to Export an Account

Okta Verify requires a Windows Hello configuration to export an account. When Windows Hello lacks configuration, Okta Verify displays a warning on the account and blocks the export. To resolve this, configure an Okta Account Management Policy to allow the enrollment of a second Windows device instead of exporting the account.

• Okta Identity Engine (OIE)
• Okta Verify
• Windows

Okta Verify requires an account without warnings for export. When Windows Hello is not configured, Okta Verify displays a warning on the account and prevents the export process. This is the expected behavior.

How does the Okta Account Management Policy allow the enrollment of a second Windows device?

Configure an Okta Account Management Policy to allow the enrollment of a second Windows device and proceed with the account enrollment by following these steps:

1. Configure the Okta Account Management Policy with the following settings:
   • Device platform: Windows
   • Custom expression:

     accessRequest.operation == 'enroll' && accessRequest.authenticator.key == 'okta_verify'
   • User must authenticate with: Password / IdP
2. Open Okta Verify on the second Windows device.
3. Proceed with the account enrollment process.