Okta Verify for macOS release notes

Generally Available features

Secure Enclave key support for Platform SSO

Platform SSO now supports a Secure Enclave key-based authentication method that integrates with Device-Bound SSO. When a user authenticates at the macOS login window with their password, the authentication unlocks a hardware-bound cryptographic key stored in the Secure Enclave. Okta uses the key to create a device-bound session that satisfies any authentication policy that requires Okta FastPass with user verification, without repeated MFA prompts. See PSSO for macOS and Configure device configuration profiles for Secure Enclave using a generic MDM.

Platform SSO password integration with Device-Bound SSO

The Platform SSO password authentication method now integrates with Device-Bound SSO. When a user signs in at the macOS login window, Okta verifies the password factor and creates a device-bound session. Users can then access Okta-protected apps in their browser without other password prompts. See PSSO for macOS and Configure device configuration profiles for Platform SSO using a generic MDM.

Fixes

• When a user registers their device using Platform SSO, the authentication flow now appears in a dedicated pop-up window, rather than through a default browser window.

• When users attempted to enroll an iPhone in Okta Verify from another device using Bluetooth, they sometimes received a message on the already enrolled device, saying Something went wrong. Enrollment of the new device succeeded on subsequent attempts, even though the error message continued to appear. (OKTA-1142007)

• This release also includes internal improvements and usability fixes.