Okta Expression Language for devices
You can use the Okta Expression Language (EL) to add a custom expression to an authentication policy. Custom expressions allow you to refine your conditions, by referencing one or more attributes.
For example, the following condition requires that devices be registered, managed, and have secure hardware:
device.profile.registered == true && device.profile.managed == true && device.profile.secureHardwarePresent == true