Farewell, Complexity: Platform SSO Simplified Setup on macOS 26 Powered by Okta and Jamf

IntroductionRequirementsThe Technical Leap: Identity at Setup AssistantRequirementsOkta Requirements Jamf Pro Requirements macOS Device Requirements Demo - Simplified Setup for Platform SSOConfiguring Single Sign-On (SSO)Okta SetupJamf Pro Single Sign-On (SSO) ConfigurationOkta PSSO Setup and IntegrationSetting Up the Okta PSSO ApplicationDevice Access SCEP Certificate ConfigurationJamf Pro SCEP Profile ConfigurationCreate a dynamic SCEP profile in Jamf Proin Jamf ProPlatformSSO … Continue reading Farewell, Complexity: Platform SSO Simplified Setup on macOS 26 Powered by Okta and Jamf →

Recent Updates to Okta Privileged Access – Oct 25

There have been a number of features released for Okta Privileged Access over the recent months, some major and some minor, but may have been lost in the excitement of Oktane 25. This article provides a summary of all the changes release. IntroductionActive Directory Integration ChangesRDP Support (aka Click-to-Connect)AD rotate password configurationAD Accounts as Okta … Continue reading Recent Updates to Okta Privileged Access – Oct 25 →

Unifying Your Corporate PKI with Okta Device Access

IntroductionRequirementsConfiguring the ADCS Certificate TemplateDuplicate and Configure a Certificate TemplateAdd the Okta Application PolicyConfigure PermissionsPublish the New TemplateManually Requesting a Certificate from a Microsoft CA via the Certificates ConsoleVerify the Certificate InstallationConfiguring Okta Device Access Certificate AuthorityConclusion Introduction While Okta can act as a Certificate Authority (CA), many enterprises prefer to leverage their existing Public … Continue reading Unifying Your Corporate PKI with Okta Device Access →

RDP’ing with Microsoft Active Directory Accounts in OPA

Okta is extending it's Okta Privileged Access capabilities with Microsoft Active Directory accounts by adding the ability to leverage them in direct RDP connections. This means it now supports two use cases with AD accounts - a reveal function where those credentials can be used (via copy'n'paste) to any AD-authenticated service, and the new direct … Continue reading RDP’ing with Microsoft Active Directory Accounts in OPA →

Streamlining Windows Admin Recovery with Okta Device Access and Intune Integration

August 2025: This is an Early Access release IntroductionRequirementsOkta RequirementsMicrosoft Intune RequirementsDemo - Windows Admin RecoveryEnable Desktop MFA recovery Desktop MFA access policiesGroup Policy-Based Deployment of Desktop MFA for WindowsConfigure Okta as a CA with delegated SCEP challenge for Microsoft IntuneRegister the AAD app credentials for Okta in Microsoft EntraSet the Intune permissions for SCEPSet the Microsoft Graph permissionsImplement the SCEP … Continue reading Streamlining Windows Admin Recovery with Okta Device Access and Intune Integration →

Device Logout for macOS

August 2025: This is an Early Access release IntroductionRequirementsEnable Early Access FeatureDesktop MFA - Device LogoutSystem LogsDemo - Device LogoutUniversal Logout with Identity Threat ProtectionEnabling the Logout Feature Entity Risk Policy configurationDemo Introduction In today’s fast-paced enterprise environment, ensuring the security of user sessions across devices is more critical than ever. With employees accessing corporate resources from … Continue reading Device Logout for macOS →

Okta Device Access: FIDO2 Passwordless Windows Login

July 2025: This is an Early Access Release IntroductionRequirementsOkta RequirementsWindows Device RequirementsUser Prerequisites & EnrollmentDemo - FIDO2 Passwordless on WindowsConfiguration stepsActivating FIDO2 Support for the Desktop MFAActivating Passwordless policy for Desktop MFASet up the FIDO2 (WebAuthn) authenticatorConfigure User Verification MethodConfigure Authentication PolicyConclusion Introduction This technical blog post offers an exploration of Okta Device Access Desktop MFA with … Continue reading Okta Device Access: FIDO2 Passwordless Windows Login →

Cross-Platform Endpoint Security: Integrating Okta and CrowdStrike for Windows and macOS

IntroductionRequirementsOkta ConfigurationCrowdStrike ConfigurationDevice Management / MDMmacOS Device RequirementsWindows Device RequirementsNetwork & ConnectivityOkta configuration stepsEndpoint Security IntegrationCreate an endpoint security integration authentication policyInstall the CrowdStrike sensor on macOSEndpoint security integration plugin for macOSInstall the CrowdStrike sensor on WindowsReview Okta System LogsConclusion Introduction In today’s dynamic and hybrid work environments, ensuring that only trusted and secure devices can … Continue reading Cross-Platform Endpoint Security: Integrating Okta and CrowdStrike for Windows and macOS →

Privileged Access Management for Microsoft Active Directory with Okta

Microsoft Active Directory is pervasive across industry, and thus a common target for hackers, particularly with the abundance of privileged accounts. In this article we look at how the Okta Workforce platform can use different approaches to managing privileged access and reducing the risk of these accessed. It includes just-in-time provisioning of access and dynamic … Continue reading Privileged Access Management for Microsoft Active Directory with Okta →

Okta Privileged Access – Example Mechanisms to Export/View Session Recordings

This article provides some example mechanisms that could be used to export and view the session recording files produced by Okta Privileged Access. There are two examples shown: A simple series of scripts that show the flow and commands to export and view logs, and An overview of a mechanism built by a former Okta … Continue reading Okta Privileged Access – Example Mechanisms to Export/View Session Recordings →