Assign apps to an app sign-in policy

Okta lets you assign multiple apps to each app sign-in policy.

All apps that you assign to an app sign-in policy are subject to the access and multifactor authentication requirements configured in the policy. All new apps, except for API service apps, start with the shared default policy.

The only policies that you can't share are for specific apps, like Admin Console, RADIUS, and O365.

Add an app to an app sign-in policy

1. In the Admin Console, go to SecurityAuthentication Policies.

2. Click App sign-in.
3. Select the policy that you want to share.
4. Select the Applications tab and then click Add app.
5. Click Add for each app you want to add to this policy.
6. Click Done.

Switch an app to another app sign-in policy

1. In the Admin Console, go to SecurityAuthentication Policies.

2. Click App sign-in.
3. Select the policy that you want to change.
4. Select the Applications tab. The apps appear on the page. Only those apps that your admin account has permissions to manage are listed.
5. Click Switch policy.
6. Select an app sign-in policy from the dropdown menu.
7. Click Save.

Add an app to a policy on the Applications page

You can switch an app's policy on the Applications page, but you can't see the other apps that share it.

1. In the Admin Console, go to ApplicationsApplications.

2. Search for and select the app name.
3. On the app's Sign On tab, scroll to User authentication, and then click Edit.
4. Select an app sign-in policy from the dropdown menu.
5. Click Save.

Related topics

Create an app sign-in policy

Add an app sign-in policy rule

Update an app sign-in policy