h8wnm (h8wnm) asked a question.
OKTA session can be re-opened without authentication
We use OKTA for both the login and unlock screens in one of our web applications. On an idle system, the unlock screen shows up. The OWA session can be accessed again without authentication during OKTA authentication from the unlock screen and login screen. After utilizing Okta mfa for authentication, we have discovered that we may shut down the OWA browser and reopen it in a few minutes to keep it operational without requiring a new authentication. Would you be able to help with developing the implementation-ready logic?
Details of the developer account:[REDACTED by moderator]
thanks
Hi @h8wnm (h8wnm) , Thank you for reaching out to the Okta Community!
The application session lifetime and configuration is the purview of the app (vendor/service provide) itself.
The Okta global and app sign on policies apply strictly to the realm of the Okta tenant. Once authentication is granted to the user, it’s up to the app to configure, decide and apply how long the user stays signed in and if the user needs to re-authenticate.
If you are looking for assistance with app side configuration, you might be able to find some useful information on the dedicated Okta Developer forum (devforum.okta.com), but you will need to keep in mind that most of the information will be limited to Okta specific product support.
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--------------------------------
Ask the experts about Okta Privileged Access