Managed devices

You can ensure that an endpoint management tool is managing devices before end users can access apps from the device.

Devices are managed if they meet these conditions:

• The device is registered through an Okta Verify enrollment.

• A device management solution is managing the user profile associated with the device.

• The device is configured for device management in Security > Device Integrations. Ensure that this is completed before the user authenticates with Okta FastPass.

• For mobile or macOS devices, that the user has authenticated with Okta FastPass at least once from the managed device.

For mobile devices, a management hint (shared secret) is deployed to the device through a Mobile Device Management (MDM) solution, such as Workspace ONE or Microsoft Intune.

For desktop devices, management attestation certificates are also deployed to the device using an MDM solution.

In preview orgs, you can use a Single Certificate Issuer to issue certificates for device registration, Device Access, and management attestation, instead of maintaining a separate certificate authority for each.

Topics

• Management attestation for mobile devices
• Management attestation for desktop devices
• Configure a Certificate Authority for desktop devices
• Managed app configurations
• Device registration settings