This article describes how to temporarily restrict access to an assigned application for specific users in Okta Classic environments.

• Okta Classic Engine
• Applications
• App Sign-on rule
• Deny Access

To temporarily restrict access, follow the steps below:

1. In the Okta Admin Console, navigate to Applications > Applications.
2. Click the specific application that will be restricted for some users.
3. Navigate to the Sign On tab of the application and scroll down to the Sign On Policy section.
4. Select Add Rule and select The following groups and users in the People section.
5. Choose the users or user group that will be restricted from logging in to the app.

6. Scroll down and locate the When all the conditions above are met, sign on to this application is option and choose Denied.

7. Save the rule and drag it to the top of the priority list. If a user logs in and matches the rule, they will now be denied. If a user does not match the rule, the next rule in the list will be evaluated.
8. When there is no longer a need to deny access, the rule can be removed.

Related References

• Configure an app sign on policy