Okta Expression Language for devices
You can use the Okta Expression Language (EL) to add a custom expression to an app sign-on policy. Custom expressions allow you to refine your conditions, by referencing one or more attributes.
For example, the following condition requires that devices be registered, managed, and have secure hardware:
device.profile.registered == true && device.profile.managed == true && device.profile.secureHardwarePresent == true