i8t1i (i8t1i) asked a question.
How to stop Okta Integration for specific Accounts/Groups?
Hi All,
Trying to figure out how to stop Okta from affecting a few accounts we use for Conference Rooms/general areas.
For ex: We have a Conference account not syncing with Okta in Directory integrations on purpose, but the sign on for the Conference email still takes us to the Okta sign in.
We want Okta to not be involved with this account since it is used by multiple people for Meetings and calendars.
We have looked on Sign-On Policies but are unsure if this will give us what we want.
Any help would be appreciated.
Let me know if you need more information
Thank you,
Josh
Well, we found the answer - we got clarification from a support ticket so I thought I'd complete the answer here.
First, we added our accounts back to Okta that we removed.
Second, Under the Aplication > Program that was set up > "Sign On" > "Sign On Policy"
We created a Sign-on Policy and added the accounts we wanted - then we made sure that "Modern Authentication" and "Web Acces" were checked so that the outlook desktop app and web sign-in worked.
We also changed the Action from "Require MFA every session" to "Allow Access"
These accounts still have to sign in via Okta and have an account connected Okta, but they don't have to worry about MFA.
Hope this helps anyone else!
Thank you to Okta Support for verifying our thoughts and pointing us in the right direction.