<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
System Status
Announcements
Announcements
Search
Search
Select Language
Knowledge Base
Knowledge Articles
Support Videos ↗
Documentation
Product Documentation ↗
Developer Documentation ↗
Product Release Notes ↗
Community
Events & Webinars
Okta Ideas ↗
Resources
Product Hub
Customer Success Hub
Product Release Update
Learning
Okta Learning ↗
Get Support
Open a Case
HomeCommunityForum
0D54z00008WUlTsCALOkta Identity EngineMulti-Factor AuthenticationAnswered2025-09-13T09:01:51.000Z2022-12-10T21:34:04.000Z2022-12-14T18:31:58.000Z

owtm9 (owtm9) asked a question.

December 10, 2022 at 9:34 PM
Okta Fastpass without Okta Verify

Does anyone know of a way to use Okta FastPass without allowing MFA (Okta Verify) from the same device? Okta FastPass allows for passwordless as well as device assurance but in the event you want to also do MFA, it does not make sense to do MFA from the same device as the user that has it already has control of the device and so looking to force MFA from a different device. I know with biometrics there may be a way around it but i am specifically talking about devices without biometric capabilities. thanks.

  • 4 answers
  • 1.18K views

  • flaviu.vrinceanu1.5628408972654734E12 (Customer Success Service Delivery)

    Hi @owtm9 (owtm9)​,

     

    Thank you for posting on the Okta community page!

     

    I have done some research and based on the below article, it seems that Okta FastPass cannot be used without Okta Verify, therefore if you would like to be able to use Okta FastPass without allowing MFA (Okta Verify) from the same device, I assume you could submit a feature request. The best way to file a feature request would be from the community site.

     

    ------------------------------------------------------------------------------------------------------------------------------------------------

    Community members help others by clicking Upvote or Select as Best on responses. Try it today.

    Expand Post
    Selected as Best

  • flaviu.vrinceanu1.5628408972654734E12 (Customer Success Service Delivery)

    Hi @owtm9 (owtm9)​,

     

    Thank you for posting on the Okta community page!

     

    I have done some research and based on the below article, it seems that Okta FastPass cannot be used without Okta Verify, therefore if you would like to be able to use Okta FastPass without allowing MFA (Okta Verify) from the same device, I assume you could submit a feature request. The best way to file a feature request would be from the community site.

     

    ------------------------------------------------------------------------------------------------------------------------------------------------

    Community members help others by clicking Upvote or Select as Best on responses. Try it today.

    Expand Post
    Selected as Best

  • owtm9 (owtm9)

    thank you. yes I agree Okta FastPass cannot be used without Okta Verify but was hoping that through some policy magic it could be restricted. I will look into submit a feature request. thanks.

  • a0n5s (a0n5s)

    We always suggest customer use FIDO2 WebAuthn for passwordless. it no need the Okta Verfify installed. it support Mac touch Id and Windows Hello and Yubikey.

    Image is not available
    
    Image is not available
    Install Okta Verify for every workstation, it takes up too much time of IT.

    Expand Post

  • owtm9 (owtm9)

    Yes, I agree and that is my plan. Unfortunately we have thousands of devices that are not yet equipped with biometrics and so looking for a short term solution (without having to purchase yubikeys or other hardware.

     

    I still feel that Okta Pastas and Okta Verify should be decoupled as they serve different purposes and would allow for greater flexibility.

     

    thank you for your response

    Expand Post
This question is closed.
Loading
Okta Fastpass without Okta Verify