This article addresses the following question:
Can Okta recognize if using a VPN IP from the system Logs as Proxy are identified?
- User connected to Okta using VPN
- Okta Identity Engine
- Okta Classic
- Reviewing the user's IP/IP chain in the System Logs
Okta recognizes the IP from the user connection request, as this document explains Dynamic zones.
When a user connects to Okta via VPN, this is the same scenario as having just one IP from the ISP provider. The VPN hides the internal user IPs, and the user reaches the internet with this VPN IP shown on Okta.
VPN will provide an IP, and from that VPN IP, the user goes out to the Internet as follows:
User > {[ ISP ] VPN } > VPN IP > Internet > Okta
The VPN encrypts the internet connection, making it difficult for websites to detect if users are using other components such as Proxy, for example.
