lnllt (lnllt) asked a question.
Difference between Okta Sign On Policy and Sign On Policy
If you go to Security -> Authentication -> Sign On tab, you can a sign on policy and apply it to groups.
If you go to Applications -> Applications -> your app's Sign On tab, you can create a sign on policy rule down the bottom.
Why are there two ways to create a sign on policy?
For the first one, you can set it so users are prompted for MFA every sign in:
Image is not available
However, for the second one, you can set the prompt for once a month:
Image is not available
Which one wins? Are we meant to use, one or the other, or both?
Hi ,
I hope you are referring to the classic engine. In classic engine sign on policy will apply for the okta tenant and application policy sign on policy will applicable when you directly access the application.