<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
System Status
Announcements
Announcements
Search
Search
Select Language
Knowledge Base
Knowledge Articles
Support Videos ↗
Documentation
Product Documentation ↗
Developer Documentation ↗
Product Release Notes ↗
Community
Events & Webinars
Okta Ideas ↗
Resources
Product Hub
Customer Success Hub
Product Release Update
Learning
Okta Learning ↗
Get Support
Open a Case
HomeCommunityForum
0D50Z00008G7UclSAFOkta Classic EngineMulti-Factor AuthenticationAnswered2024-04-17T09:17:09.000Z2016-01-27T20:54:05.000Z2017-02-19T17:05:41.000Z
eric.karlinsky1.4147731941881877E12 likes this.

  • eric.karlinsky1.4147731941881877E12 (Okta, Inc.)

    Hi Jannetta,

     

    It's part of the plan, yes. Immediately, we are focused on geographical constraints for sign-on policies (Multiple IP Zones, Location, Country). After those features are delivered in the beginnig of this year, time frames are a frequently requested feature that we plan to take on.

     

    That said, Okta's flexible Policy Framework may be able to mitigate your risk today. What is the use case that's driving this request? Would on- and off-prem policies help at all?

     

    Thanks,

    Eric
    Expand Post

  • 2uwu3 (2uwu3)

    Hi Eric,

     

    We are happy that this is being looked at.  Do you have a general time frame that it could possibly be available?  In the meantime, if there is a work around, that would be wonderful.

     

    One of the use cases that we are looking at is..To use groups for the users to have the following access:

     
    • All Salaried employees can access anytime/anywhere. 
    • All hourly employees are to access Okta between the hours of 6am to 6pm Monday through Saturday only, on or off network.  
     

    Another one is using jobcodes to determine if they can access on or off network then on top of that have a time frame that they can access.

     
    • All Assistant Managers can access Okta On or OffNetwork from 6am to 6pm
    • All other hourly employee would be able to only access Okta OnNetwork between 6am and 6pm.
     Does this make sense?

     

    Thanks,

    Jannetta
    Expand Post

  • eric.karlinsky1.4147731941881877E12 (Okta, Inc.)

    Hey Jannetta,

     

    There are some API/script-related workarounds that you could implement, but they're not ideal. If you'd like to discuss them, I'm happy to do that.  

     

    I have a few questions about the timeframe request though. Is the 6am to 6pm timframe based on a certain time zone, is it GMT-based, or is it based on the end user's local time?

     

    Thanks,

    Eric

    Expand Post

  • 2uwu3 (2uwu3)

    Hi Eric,

     

    We would like to discuss a workaround that we could use until Okta has an option.  

     

    The time frame question is a great question.  We will need to figure this out since our user profiles do not have the time zones included.  We have store numbers but not the time zone they are in.  I think we would have to figure something out with GMT. I would like to discuss this a further with you.

     

    Do you have time early next week that my manager and I could visit with you?

     

    Thanks, 

    Jannetta
    Expand Post
This question is closed.
Loading
Is Configuring MFA by Group then Time Periods on the Roadmap?