00ufqy4mxkCMrc2vn0h1.5318579510676252E12 (Optiv) asked a question.
Capturing consent
Does anyone know if this is live or one of those in-the-works things?
- t529b (t529b)
The solution described in the article can be implemented now, but it requires development of a custom application to collect the desired information and then uses API calls to write information back to the user's Okta account. Okta's Professional Services can help with development (for a fee), but then the customer will also have to find a place to host the application.
We recently implemented just this sort of solution when our legal department insisted on an opt-in policy to use SMS for account recovery or multifactor authentication. Our solution just displays a single web page containing legal disclaimers and a single button that says 'Acknowledge'. When the user clicks the button, an API call sets a custom BOOL attribute on the user's account to 'True', which satisfies legal's requirement.
Expand Post
This question is closed.
The solution described in the article can be implemented now, but it requires development of a custom application to collect the desired information and then uses API calls to write information back to the user's Okta account. Okta's Professional Services can help with development (for a fee), but then the customer will also have to find a place to host the application.
We recently implemented just this sort of solution when our legal department insisted on an opt-in policy to use SMS for account recovery or multifactor authentication. Our solution just displays a single web page containing legal disclaimers and a single button that says 'Acknowledge'. When the user clicks the button, an API call sets a custom BOOL attribute on the user's account to 'True', which satisfies legal's requirement.