kbazp (kbazp) asked a question.
Device Assurance Policies use with application authentication policy or with Global Session Policy
Hello,
Could Device Assurance Policies be used with Authentication policies or with Global Session Policy?
- MatthewH.10249 (State of Iowa)
We have some set in our individual rules of "Authentication Policies". We set expressions in the "The following custom expression is true" attribute.
- kbazp (kbazp)
Does it only work with Okta Verify FastPass?
Before you begin
Confirm that these conditions are met:
- You enabled Okta FastPass for your organization. See Enable Okta FastPass
- You created one or more platform-specific sets of device assurance attributes.
- You identified at least one authentication policy that should include device assurance.
Expand Post - MatthewH.10249 (State of Iowa)
I believe so. Hopefully an Okta employee will chime in on this to confirm.
- User16594883467582706479 (Customer Support Online Experience)
Hi, @kbazp (kbazp)
Thank you for posting on our Community page!
Thank you @MatthewH.10249 (State of Iowa) for providing insight to the problem. I can confirm that FastPass is required in order to check the device health. By adding device checks to authentication policy rules, you can establish minimum requirements for unmanaged devices that have access to systems and applications in your organization.
You could also check these articles out for more info:
- https://help.okta.com/oie/en-us/Content/Topics/identity-engine/devices/fp/fp-configure.htm
- https://help.okta.com/oie/en-us/Content/Topics/identity-engine/devices/workflow-mobile.htm
Thank you for reaching out to our Community and have a great day!
_____________________________________________________________________________
Community members help others by clicking Upvote or Select as Best on responses. Try it today.
_____________________________________________________________________________
Expand Post
This question is closed.
Hi, @kbazp (kbazp)
Thank you for posting on our Community page!
Thank you @MatthewH.10249 (State of Iowa) for providing insight to the problem. I can confirm that FastPass is required in order to check the device health. By adding device checks to authentication policy rules, you can establish minimum requirements for unmanaged devices that have access to systems and applications in your organization.
You could also check these articles out for more info:
Thank you for reaching out to our Community and have a great day!
_____________________________________________________________________________
Community members help others by clicking Upvote or Select as Best on responses. Try it today.
_____________________________________________________________________________