00udm1sfkbgXGu1Lh0y1.5259745087518672E12 (Biogen) asked a question.
Is OKTA SAML MFA supported in China?
We have a new site opening soon in China (Shanghai). Are OKTA SAML & MFA application services compliant with China regulatory authorities ?
- vlad.huma1.5163136961455237E12 (Vendor Management)
Hi Peter,
Our understanding of China’s Data Residency law is that customers who are using Okta to manage personal data of Chinese Citizens should connect Okta to a directory service (AD or LDAP) located within China. This sets Okta up as a Secondary Database, exempting it from the Data Residency requirements.
Customers who have employees working in China who are not citizens typically use some type of VPN to route their corporate traffic through Singapore or another point-of-presence outside of the Republic of China, in order to get around the Chinese traffic blocking policies. Okta has multiple customers in China, and to date has never been blocked by the Chinese Government.
Okta will continue to work with our customers on finding solutions to ensure availability of the Okta service.
Best regards,
Vlad Huma
Expand Post - mike.davie1.5312945692819849E12 (Customer First Programs)
Hello Peter,
Thanks for posting your inquiry in Okta Community Portal.
If you receive a great answer to your question(s), please help readers find it by marking it the best answer. Hover over the answer and click "Best Answer."
Thank you,
Mike Davie
Okta Help Center
Expand Post Thanks Vlad, do OKTA have preferred directory service partners within China?
- 9luzm (9luzm)
Hi team, do you have any update on this? We have a customer opening an office in Shanghai, we would like to know if this is an options. Best.
This question is closed.
Hi Peter,
Our understanding of China’s Data Residency law is that customers who are using Okta to manage personal data of Chinese Citizens should connect Okta to a directory service (AD or LDAP) located within China. This sets Okta up as a Secondary Database, exempting it from the Data Residency requirements.
Customers who have employees working in China who are not citizens typically use some type of VPN to route their corporate traffic through Singapore or another point-of-presence outside of the Republic of China, in order to get around the Chinese traffic blocking policies. Okta has multiple customers in China, and to date has never been blocked by the Chinese Government.
Okta will continue to work with our customers on finding solutions to ensure availability of the Okta service.
Best regards,
Vlad Huma