Configure Okta Verify release controls

Early Access release. See Enable self-service features.

The Okta Verify release controls feature allows you to centrally manage the automatic update policy for the Okta Verify app on users' devices. This gives you full control over the update cadence to mitigate risks and align with internal testing schedules.

This policy only applies to Okta Verify for Windows and is a global setting for the entire org.

How it works

You can set a global policy option to control updates of the Okta Verify app:

  • Accept automatic updates: Install the latest version of Okta Verify on the client device. This is the default setting for orgs and allows for automatic updates.

  • Update only for releases that include security hotfixes: Only install Okta Verify updates that contain a critical security hotfix.

    This can be any version tagged as a hotfix by Okta, including major release versions.

    For example, consider the following scenarios where users' devices have version 5.8.0 installed:

    • Okta releases version 6.4.1. This release doesn't contain a hotfix. Under this policy option, version 5.8.0 remains on users' devices.

    • Okta releases version 6.4.2, which contains a hotfix. Under this policy option, Okta automatically installs version 6.4.2 on users' devices.

  • Disable updates: Users must manually update the Okta Verify app.

Start this task

Use the following steps to enable the release control feature for the Okta Verify app:

  1. In the Admin Console, go to SecurityAuthenticators.

  2. Click the Okta Verify authenticator, and then select the Okta Verify release controls tab and click Edit.
  3. In the Edit release controls dialog, select one of the three options:
    • Accept automatic updates
    • Update only for releases that include security hotfixes
    • Disable updates
  4. Click Save.

After you update the authenticator policy, the automatic update service uses your selection to determine if and when client devices receive updates of the Okta Verify app.

Due to network caching, there can be a 15-minute delay between setting the policy and when any change to the automatic update service takes effect.

Related topics

Configure the Okta Verify authenticator