Device Trust for macOS Registration Task Version History

This Early AccessEarly Access (EA) features are opt-in features that you can try out in your org by asking Okta Support to enable them. Additionally, the Features page in the Okta Admin Console (Settings > Features) allows Super Admins to enable and disable some EA features themselves. release includes the following:

• Previously, macOS prompted end usersIn Okta literature, we generally refer to "end users" as the people who have their own Okta home page (My Applications), using chiclets to authenticate into all of their apps. End users do not have any administrative control. When we refer to "users" we are generally referring to the individual(s) who have administrative control. to reset the default keychain during Device Trust enrollment if the keychain was unavailable for some reason (corrupted or missing). Version 1.2.1 halts the enrollment process if the default keychain is unavailable and as a result, the user is not prompted to reset the keychain.
• In previous versions, the Registration Task update process unintentionally removed key material (clientEssentially, a client is anything that talks to the Okta service. Within the traditional client-server model, Okta is the server. The client might be an agent, an Okta mobile app, or a browser plugin. certificate, Okta keychain, keychain password) and the renewal task in cases when the update process itself failed for some reason, which un-enrolled currently-enrolled devices. Beginning with version 1.2.1, these items are no longer removed if the update process itself fails.
• Admins can now use the following query to determine which version of the Registration Task is installed on the device.

python ~/Library/Okta/okta_device_trust.py version

This Generally AvailableGenerally Available features are available to all orgs automatically according to each customer's SKU. You don’t need to enable them in the console or contact Okta Support. release includes the following:

• Slack is added to the default appAn abbreviation of application. Essentially, it is a web-based site used to perform any number of specific tasks, and requires authentication from end users by signing in. whitelist.
• The System Log now reports the DeviceDisplayName attribute in the DebugContext.
• Improvements to the logs the Device Registration Task publishes to Jamf Pro during deployment
• Internal fixes and performance enhancements

This first Early Access version provides several internal fixes and improvements.