Mo A. (JDP) asked a question.
We are testing macOS 27 Developer Beta 3 (Build 26A5378j) in our environment and have identified an issue with Okta Device Access / Desktop MFA.
After upgrading from macOS 26.5.1 to macOS 27 Beta 3, logged user no longer prompted for Okta enrollment or MFA at the macOS login window. They simply enter their macOS username and password and are logged in directly.
We are running the latest version of Okta Verify (9.65.2).
We've confirmed the following:
- Okta Device Access authorization plugin is installed.
- OktaDAAuthPlugin is present in the macOS authorization database.
- com.okta.deviceaccess.servicedaemon is running.
- The Authentication Service Extension is launched by loginwindow.
However, the enrollment/Desktop MFA UI is never displayed. We also observed log entries indicating the com.okta.mobile.auth-service-extension is being disallowed due to an unsatisfied com.apple.security.application-groups entitlement.
We reviewed the Okta KB linked below regarding "Okta Verify Fails to Launch on macOS 27 Golden Gate Beta 1". That issue appears to have been resolved in the latest Okta Verify release, but the behavior we are seeing on macOS 27 Developer Beta 3 (26A5378j) appears to be different.
Can you confirm whether this is a known issue with Beta 3 or if there is a recommended workaround or newer build available?
Thank you
