OKTA Early Access Features

Okta has some features in Early Access that can help improve your experience with Workforce. See how to enable an Early access feature here.

Note: There maybe feature differences between Okta Preview and Production, see here for more

Require specific authenticator instance in an authentication policy

• If you have multiple IDPs set in your organization this will allow you to specify which authenticator method you would like to use in an authentication policy.

Require specific authenticator instance in an authentication policy feature appears to have become Generally Available in Okta Preview and may no longer appear on list of early access features in Okta Preview. See Okta Release notes here

Okta Account Management Policy

• Allows you to set a custom authentication policy for when a user enrolls new authenticators, edits their personal information, or resets their password. Okta documentation
  • Note: Additional configuration is needed to use this for password resets, see here for more
• When you enable this feature any time a user attempts to enroll a new authenticator they will first be evaluated against this policy. First time a user goes to enroll in workforce it may ask them to first sign in with an existing factor before continuing to start enrollment of your Workforce Authenticator.

• Okta account management will enable a new stand alone policy to appear under Authentication Policies

• Authenticator Enrollment Policies and Password Policies may need to be configured to work with any changes made to the Okta Account Management Policy. See Okta Documentation for how to set this up properly in your environment
  • Other Okta Docs for Okta Account Management Policy
    • Enroll your first phishing-resistant authenticator
    • Enroll new authenticators using an existing phishing-resistant authenticator
    • Unlock accounts and recover passwords using phishing-resistant authenticators