mbuq7 (mbuq7) asked a question.
Device Usage Restriction by Okta: Applicability of App Access Management on Windows and MacOS
Hello Community members,
I understand that there are features such as "Okta Device Trust for Windows" that can forcefully restrict desktop devices that can use service providers such as GitHub that are linked to Okta applications, but is it possible to restrict it on the MacOS version as well?
Also, does Okta offer any other features besides "Okta Device Trust for Windows" that restrict the devices that can use specific apps?
Hi @mbuq7 (mbuq7) , Thank you for reaching out to the Okta Community!
If Device Trust implementation is not something you explicitly require for your use case and if your org is OIE or migrated to OIE (Okta Identity Engine), you can look into configuring app level authentication policies. From there, setup an authentication policy rule that explicitly denies access when "device platform" is something you do not wish to allow. Example:
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--
Help others in the community by liking or hitting Select as Best if this response helped you.
Level up your Identity security superpowers with Okta Learning.
Join the Online Discussion for Ask me Anything on March 25, 2025: Identity Threat Protection with Okta AI
Hi @Mihai Negoita - Okta (Okta, Inc.) , Thank you for your reply.
I'm sorry if I'm not clear enough. Is it possible to control a MacOS terminal so that only a specific MacOS desktop PC can access it and other PCs cannot access it?
Hi @mbuq7 (mbuq7) You can look into implementing Device Assurance.
Device assurance policies can then be included into the authentication policies.
Regards,
Mihai N.
-----------------------------------------------------------------
Visit the Okta Community to search for solutions or ask questions.
Level up your Identity security superpowers with Okta Learning.
The new Okta Help Center YouTube channel is your go-to resource for tips, troubleshooting, and best practice videos. Subscribe today.
You can also look into the Managed Devices options.
Regards,
Mihai N.
-----------------------------------------------------------------
Visit the Okta Community to search for solutions or ask questions.
Level up your Identity security superpowers with Okta Learning.
The new Okta Help Center YouTube channel is your go-to resource for tips, troubleshooting, and best practice videos. Subscribe today.
Hi @mbuq7 (mbuq7) If you ar interested in finding out more, we have an upcoming Ask-Me-Anything (AMA) event on the subject of Okta Device Access.
Please post your questions there and our experts will provide answers.
Regards.
--
Help others in the community by liking or hitting Select as Best if this response helped you.
Collect them all. Learn a new skill and earn a new Okta Learning badge.
This month's AMA topic: Okta Device Access. Ask away today.