Create and configure the Desktop MFA app

Add the Desktop MFA app integration to your org and assign it to the relevant users and groups.

Procedure

1. Sign in to your Okta org as a super admin.

2. In the Admin Console, go to SettingsAccount.

   Under Embedded widget sign-in support, ensure that the Interaction Code checkbox is selected.

3. In the Admin Console, go to ApplicationsApplications.

4. Click Browse App Catalog and search for Desktop MFA.

5. Click Add integration.

   If you get an error message saying This feature isn't enabled, contact your account representative.

6. On the General Settings page, edit the app label or click Done to accept the default value and create the app.

7. Click the app to configure it:

   1. On the Sign on tab, go to the Settings section and click Edit.

   2. Click the Application username format dropdown menu and select Okta username prefix.

   3. On the Assignments tab, assign the app to relevant users or groups.

   4. On the General tab, go to the Client Credentials section to find the Client ID and Client Secret. The identifier and secret are generated when you create the app integration.

      Record these values, as they're needed when you configure Desktop MFA for deployment.

8. Click Save.

When the Desktop MFA app is integrated, a Desktop MFA authentication policy is added to your org. This policy verifies that users who try to sign in with Desktop MFA meet specific conditions, and enforces factor requirements based on those conditions. The Desktop MFA authentication policy shouldn't be modified for any reason. If necessary, you can create a separate authentication policy to meet the needs of your org. See Authentication policies.

Next step

Download Okta Verify for macOS