View Windows device details
Review the accounts, configurations, signals, and identifiers shown for Windows devices when you enable the Device Visibility feature.
Device Visibility
Early Access release. See Enable self-service features.
The device details page for Windows devices uses a four-tab layout when you enable the Device Visibility feature: Accounts, Configurations, Signals, and Identifiers.
If you don't have the Device Visibility feature enabled, Windows device details use a different view.
The main header for this page shows the Device display name and the device's operating system (OS). Also shown are the device's current state and the action buttons to change the device state.
Select View logs to open the System Log filtered to show only the events for this device.
Accounts tab
The Accounts tab shows the Okta user enrollments on the device.
Users without a known OS account
These users have Okta FastPass and Okta Desktop MFA enrollments on the device that aren't linked with a detected OS account.
On Windows devices, all enrolled users appear in this section because OS account detection isn't available for Windows.
| Field | Description |
|---|---|
| Okta user | The Okta user linked to this account. |
| Enrolled on | The enrollment date for this user account on this device. |
| Management | Indicates whether a device management solution manages the user profile associated with this device enrollment.
|
| Lock screen | The method that the user most recently used to unlock this device. |
| Recovery PIN | For managed accounts, you can generate a recovery PIN for Okta Device Access. |
Configurations tab
The Configurations tab shows the Okta Verify installation details reported from this device. Each installed component appears as a separate card.
If Okta Verify hasn't reported data for this device, an informational notice appears in place of the configuration cards. Okta Verify sends signal data approximately every three hours after Device Visibility is enabled.
| Card | Description |
|---|---|
| Version | The version of Okta Verify installed on the device.
Select Download latest version to open the download page. |
| Okta Verify authenticator | This value indicates that the Okta Verify authenticator is installed. Select Authenticator settings to open the authenticator configuration in the Admin Console. |
Device Capabilities
The Device Capabilities section shows the active Okta-managed capabilities on this device. Each capability shows Provisioned or Not provisioned, or is omitted if it doesn't apply.
| Capability | Description |
|---|---|
| Desktop MFA Recovery PIN | Shows Provisioned if a recovery PIN secret exists in Okta for this device, indicating that a recovery code is available for admin use. |
| Device-Bound SSO | Shows Provisioned if the device has a valid registration and the device instance key is registered with Okta. |
| Device Posture Sensor Mode | Shows Provisioned using the same criteria as Device-Bound SSO. |
The Platform SSO capability doesn't appear on Windows devices. It applies to macOS only.
Signals tab
The Signals tab shows the device security attributes that Okta Verify collects.
| Signal | Description |
|---|---|
| OS version |
The operating system version installed on the device. |
| Disk encryption |
This value indicates whether the device storage is encrypted. This reflects BitLocker status. The device is marked as encrypted only when encryption is active and enabled on the system volume. For example: All internal volumes encrypted. |
| Trusted Platform Module |
This value indicates whether a Trusted Platform Module (TPM) is present and in use on the device. For example: In use. |
Identifiers tab
The Identifiers tab shows hardware and platform identifiers for the device.
The Hardware Universally Unique Identifier (UUID) field replaces the UDID (Unique Device Identifier) field from earlier Admin Console versions. Devices registered before this change may still display UDID.
| Identifier | Description |
|---|---|
| Okta Device ID | The unique identifier assigned to this device by Okta. |
| Display name | The display name of the device. |
| Manufacturer | The vendor that created the physical device. |
| Model | The device type or design. |
| Serial number | The hardware serial number of the device. |
| Hardware Universally Unique Identifier (UUID) | The hardware-level unique identifier for the device.
This field was previously named the device UDID. |
| Security Identifier (SID) | The Security Identifier (SID) is a unique number for a user, user group, or other security principal.
For example: S-1-83625951649466-0. |
| Dedicated hardware | The TPM public key hash for the device's Trusted Platform Module. |