<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z00008nhGWQCA2Okta Classic EngineAuthenticationAnswered2024-04-29T05:45:19.000Z2023-02-13T23:21:11.000Z2023-02-15T20:54:58.000Z
Deploying Fastpass to one department and not the whole org

We are currently testing Fastpass on our Sandbox. I'm trying to test Fastpass with one group but not have it available for everyone. Is this possible since we want to slowly roll it out?


  • MatthewH.10249 (State of Iowa)

    Yes, sort of, but only if you are OK with not see the FastPass button on the Okta Widget. We have been testing Fastpass for several months with a select group of users who download Fastpass from our System Center Configuration Manager (SCCM) so that we can add the necessary Crowdstrike and Windows Security files needed for device telemetry that can then be used for Auth Policy expressions that start like "device.provider.zta.overall...".

     

    To hide Fastpass on the Okta Widget you edit "Okta Verify" under the "Authenticators -> setup" list. You should see a section called "Okta FastPass" that has an attribute checkbox "Sign-in page option -> Show the "Sign in with Okta FastPass" button".

     

    Device Expressions:

    https://help.okta.com/oie/en-us/Content/Topics/identity-engine/devices/el-about.htm

    Expand Post
    • MatthewH.10249 (State of Iowa)

      Perhaps Multibrand customizations would allow you have "multiple sign-in pages" with FastPass showing on one and not on others. If not then might make for a good "Ideas" request.

       

      The latest release notes mentions "multiple sign-in pages".

      https://help.okta.com/en-us/Content/Topics/ReleaseNotes/production.htm

      Multibrand customizations

      Multibrand customizations allow customers to use one org to manage multiple brands and multiple custom domains. This drastically simplifies multi-tenant architectures where customers create multiple orgs to satisfy branding requirements. Multibrand customizations allow orgs to create up to three custom domains (more upon request), which can be mapped to multiple sign-in pages, multiple sets of emails, error pages, and multiple versions of the End-User Dashboard. See Branding.

      Expand Post
  • YanderickG.58469 (Customer)

    Thank you Matthew! I arrived at the same conclusion too and noticed the option to hide the Fastpass button.

  • User16594883467582706479 (Customer Support Online Experience)

    Hi, @YanderickG.58469 (Customer)​ 

     

    Thank you for posting on our Community page!

     

    Thank you, @MatthewH.10249 (State of Iowa)​ for bringing insight to the issue.

     

    I have done some research and found an article on configuring the policy to a single group:

     

    Hope this helps.

     

    Thank you for reaching out to our Community and have a great day!

     

    _____________________________________________________________________________

    Community members help others by clicking Like or Select as Best on responses. Try it today.

    _____________________________________________________________________________

    Now available: Product release highlights, your top questions, and other things you may have missed in this month's newsletter

    _____________________________________________________________________________

    Expand Post
    Selected as Best
This question is closed.
Loading
Deploying Fastpass to one department and not the whole org