This guide outlines how to set up Okta Device Trust according to MSP best practices, using Microsoft Intune as a device management solution. Okta also supports several other options, including VMWare and JAMF.
For more information about Okta Device Trust and registered/managed devices, see Device Trust with ZeroTek | Okta.
Before you begin
Make sure you meet the following conditions:
Okta FastPass is configured in the target Okta org. This ensures user devices are properly registered in Okta Verify.
All Windows and/or MacOS devices that access Okta are managed by an Okta-compatible device management solution such as Intune, VMWare, or JAMF.
1️⃣ Set up the certificates
Configure Okta as a certificate authority, then do the following as required for the environment:
2️⃣ Add endpoint security for Windows devices
If Windows devices are present, you must Add endpoint security for Windows devices in Okta.
3️⃣ Create a Device Trust authentication policy
As a final step, you must Create an Okta Device Trust authentication policy.
Need help? Contact ZeroTek Support at [email protected].