TheofilosT.72069 (Showpad) asked a question.
Okta - Kandji Integration for Okta Verify - Managed Device
We have had Passwordless authentication enabled for over a year, and I would like to improve our Authentication Policies to include checks for managed devices.
We are using Kandji and the Okta Verify app from the App Store to deploy Okta Verify to all macOS devices.
- If I enable Okta Device Trust, will anything break for existing devices that are already registered?
- Do I need to manually reset or remove the app on all devices for the changes to apply?
The Kandji article mentions that for previously registered devices with a management status of "Not managed", the device record needs to be deleted from Okta Universal Directory and the user must sign out of Okta Verify before re-registering the device.
- Does this mean that we need to ask users to both remove their Okta Verify account and also delete the device record from Okta? Or is one of those steps enough?
- This process seems disruptive. Is there a better way to transition to Okta Device Trust without asking users to manually re-register?
Hi @TheofilosT.72069 (Showpad) , Thank you for reaching out to the Okta Community!
I would recommend to open a case to work with the Support team to review your current configuration, but to provide a preliminary answer to your questions:
>Generally, no, it shouldn't break access immediately for devices already registered with Okta Verify.
>This is the most reliable path to ensure the device is correctly recognized as "managed" by Okta's Device Trust.
>Answering these as one: - you might be able to leverage Kandji to push configuration, potentially reducing the need for manual re-registration in some cases depending on the users current condition.
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--
Help others in the community by liking or hitting Select as Best if this response helped you.
Collect them all. Learn a new skill and earn a new Okta Learning badge.
Thank you @Mihai N. (Okta, Inc.) That is quite useful ⭐️
I also opened a case with Support.