Tako AI v1.3: Major Updates Just in Time for Oktane 25

As we eagerly await Oktane 25, we at Fctr Identity are thrilled to share that Tako AI has been hard at work preparing some game-changing features for the identity management community. While everyone's buzzing about what Okta will unveil at their annual event, we couldn't wait to share our latest innovations that are reshaping how … Continue reading Tako AI v1.3: Major Updates Just in Time for Oktane 25 →

New Okta Group Push API

If you have been working with applications in Okta for some time and occasionally use the APIs (or Workflows) you would be aware that one glaring omission in the API library was an API to manage the Push Groups on applications. This has now been addressed with the Group Push Mapping API. The Group Push … Continue reading New Okta Group Push API →

Tako (Okta AI Agent) Takes a Huge Step Towards Becoming Autonomous

Executive Summary We’re introducing a significant new feature to Tako, our AI agent for Okta, with the addition of secure real-time API query capabilities. This upgrade allows Tako to connect directly with Okta’s APIs, intelligently generating and executing secure code based on natural language questions. Beyond enhancing Tako’s current functionality, these capabilities establish the foundation … Continue reading Tako (Okta AI Agent) Takes a Huge Step Towards Becoming Autonomous →

Smarter Access Control: A Deep Dive into Okta Authentication Policies and Related Elements

>_this article is based on the okta SSO and adaptive MFA License Authentication policies in Okta provide a flexible and powerful way to control how users access applications and services. By defining specific conditions—such as user group membership, device trust level, location, or network—administrators can enforce tailored authentication requirements like multifactor authentication (MFA) or passwordless … Continue reading Smarter Access Control: A Deep Dive into Okta Authentication Policies and Related Elements →

“Enhancing Zero Trust with Okta Identity Threat Protection and Jamf Security: Continuous Access Evaluation Through Shared Security Signals”

IntroductionPrerequisites: Setting the Foundation for Okta Identity Threat Protection and Jamf Security Cloud IntegrationOkta RequirementsJamf Security Cloud RequirementsAdditional ConsiderationsDemosDemo - Jamf Trust Activation with OktaDemo - Identity Threat Protection with Jamf and Universal Logout - macOSDemo - Identity Threat Protection with Jamf and Universal Logout - Mobile devicesAuthorizing Jamf Trust in Your Okta OrganizationCreate a Jamf SSO … Continue reading “Enhancing Zero Trust with Okta Identity Threat Protection and Jamf Security: Continuous Access Evaluation Through Shared Security Signals” →

Okta Device Access Out-of-the-box enrollment with Jamf Pro

April 2025: Additional app identifier required for the associated domain entry on macOS 15 Sequoia IntroductionRequirementsOktaApple Business Manager (ABM) AccountJamf Pro MDM ConfigurationDemosSecure macOS onboarding and Platform SSO enrollmentJust-in-Time (JIT) local account creation and Desktop MFA enrollmentConfigure Single-Sign-OnOkta ConfigurationJamf Pro ConfigurationConfigure Okta LDAP with Jamf ProOkta ConfigurationJamf Pro LDAP configurationOkta Device Access configurationSet up Device Access SCEP … Continue reading Okta Device Access Out-of-the-box enrollment with Jamf Pro →

Oracle Fusion Cloud Applications SSO Integration with Okta Workforce Identity Cloud

This Article will take you through the configuration to setup Oracle Fusion Cloud Applications SSO with Okta Identity Workforce Identity cloud. Prerequisites: At least IT Security Manager Role assigned to your user in Oracle Cloud admin console. Admin access to Okta Workforce Identity Cloud Console Create a SAML APP in Okta Admin Console: At the … Continue reading Oracle Fusion Cloud Applications SSO Integration with Okta Workforce Identity Cloud →

Supporting Shared Accounts via SAML

This article explains how you can extend and configure Okta within the shared account use case. Credits to Nicholas Connelly for sharing this approach. Disclaimer: This approach is not part of security best practices because it can be exploited and be abused by rogue administrators. I would recommend to look at this workaround if you … Continue reading Supporting Shared Accounts via SAML →

Better together: Okta Device Access and Okta FastPass

IntroductionmacOS Okta Device Access and FastPass experienceEnable Okta FastPassEnroll Okta FastPass on macOSConfigure authentication policiesOkta DashboardApplication PolicyAdditional configurations on macOS DevicesConfigure SSO extension for managed macOS devicesConfigure auto-launch Okta Verify on macOS devicesWindows Okta Device Access and FastPass experienceEnroll Okta FastPass on WindowsSkip the Open Okta Verify prompt Introduction Combining security and user experience sometimes seems to be a … Continue reading Better together: Okta Device Access and Okta FastPass →

Privileged Access Management for AWS using Okta Workforce Solutions

This article is a summary of a presentation I recently gave looking at Okta Workforce Identity Cloud and Amazon Web Services (AWS). It is focused on how privileged access management can be applied to AWS users and access, leveraging the different Identity and Access Management (IAM) capabilities in Okta. IntroductionAccess Management and AWS PrivilegesIdentity Administration, … Continue reading Privileged Access Management for AWS using Okta Workforce Solutions →