Why Okta Does Not Differentiate between Mobile vs Desktop Versions of Okta Verify
Last Updated:
Multi-Factor Authentication
Okta Identity Engine
Overview
This article addresses the situation in which it seems Okta makes no difference between Okta Verify Mobile and Okta Verify Desktop, and clarifies whether that is the case.
Applies To
- Okta Verify
- Multi-factor Authentication (MFA)
- Okta Identity Engine (OIE)
Solution
It is possible to differentiate between Mobile and Desktop versions of Okta Verify in the authentication flows by using the platform or device assurance policy in a sign-on rule. However, it is not yet possible with authenticator enrollment policies.
For thick clients:
- On macOS, this can be achieved via SSO Extension (managed only, also works for iOS);
- On Windows, some apps can be made compatible using this PowerShell script;
- For unmanaged devices, this is an area Okta is working on improving.
