RobertC.79156 (Customer) asked a question.
Login to Okta without a password
GSP is set so users can use any factor required by the app authentication policy to establish a session. The authenication policy is set to possession factor.
When i access the app i am getting asked for a password. ? The correct GSP and Authentication policies are being executed.
I thought this type of configuration would not ask for a password but for a possession factor which in this case would be okta verify with push method. Why would it be asking for a password and not a push security method.
Hi @RobertC.79156 (Customer) , , Thank you for reaching out to the Okta Community!
Without seeing your configuration and the user’s login flow, I would not be able to give you precise instructions on who to configure your policies, but at a high level, I can give you the following pointers based on some assumptions:
-assuming the login flow is not SP initiated directly into a specific app and you are just going to the Okta page to login from there:
- the Global Session Policy should be something like this:
-from there, an Authentication Policy needs to be set up for the Okta Dashboard app because that’s where users are redirected via the default login flow:
Once the user is on the Dashboard, they can click on any assigned app, so from there the desired app’s particular Authentication Policy would apply (which might also require reconfiguration to not require the password).
Please note that the above, are very simple examples for testing purposes and may not meet your company’s security requirements, so please make sure to adjust them as needed and assign them to limited groups while you test.
While I was looking into this, I’ve noticed that you also have a Support ticket open, so I recommend working with my colleagues as they can see your configuration and work with you to make the necessary adjustments for your particular requirements.
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--------------------------------
Ask the experts about Okta Privileged Access