Okta Expression Language for devices

You can use the Okta Expression Language (EL) to add a custom expression to an authentication policy. Custom expressions allow you to refine your conditions, by referencing one or more attributes.

For example, the following condition requires that devices be registered, managed, and have secure hardware:

device.profile.registered == true && device.profile.managed == true && device.profile.secureHardwarePresent == true

Topics

• Expression Language attributes for devices
• Add a custom expression to an authentication policy

Related topics

• Okta Expression Language information for developers
• EDR signals for custom expressions
• Create an endpoint security integration authentication policy
• About behavior and sign-on policies
• Behavior Detection System Log events
• Allow or deny custom clients in Office 365 sign-on policy