Okta Expression Language for devices

You can use the Okta Expression Language (EL) to add a custom expression to an app sign-in policy. Custom expressions allow you to refine your conditions, by referencing one or more attributes.

For example, the following condition requires that devices be registered, managed, and have secure hardware:

device.profile.registered == true && device.profile.managed == true && device.profile.secureHardwarePresent == true

Topics

• Expression Language attributes for devices
• Add a custom expression to an app sign-in policy

Related topics

• Okta Expression Language information for developers
• EDR signals for custom expressions
• Create an endpoint security integration app sign-in policy
• About behavior and sign-on policies
• Behavior Detection System Log events
• Allow or deny custom clients in Office 365 sign-on policy