Part of the Okta FastPass Setup Guide.
ROLE REQUIRED
ZeroTek Administrator
ZeroTek Technician
This procedure prepares your global session policy for Okta FastPass by doing two things:
Removing the global password requirement from the existing global session policy
Transferring responsibility for defining and enforcing authentication criteria to each of your individual authentication policies
This is the first step in setting up Okta FastPass. Do not skip or reorder it.
BEFORE YOU BEGIN
This procedure assumes the Okta org (sandbox or production) was configured according to ZeroTek's New Org Setup guide. As part of that setup, a global session policy was created for a group containing all staff/personnel that requires MFA for all human users.
Steps
Identify the correct global session policy
In ZeroTek, select the target org in the Organizations menu, then navigate to Policies > Global Session Policy tab.
Click the name of the global session policy configured for the all staff group.
Confirm the policy meets both of the following conditions before proceeding:
It is prioritized below the policies for Deep Link and Service and Shared Admin Accounts.
It is assigned to the group containing the users you want to configure for Okta FastPass. If you followed the New Org Setup guide, this might be called "Policy - All Staff" and will contain all Okta accounts tied to human users. This policy may have one or two "MFA Required" rules (one for on-site logins, one for off-site logins) depending on the needs of the client.
Modify the existing policy rules to support Okta FastPass
If there is an On Site - MFA Required rule, click the Edit icon and change the following settings:
Establish the user session with — select Any factor used to meet the Authentication Policy requirements
Multifactor authentication (MFA) is — select Not required
Click Save.
If there is an Off-Site - MFA Required rule, click the Edit icon and make the same changes:
Establish the user session with — select Any factor used to meet the Authentication Policy requirements
Multifactor authentication (MFA) is — select Not required
Click Save.
NEXT STEPS
Now that the global session policy is configured to support Okta FastPass for human user accounts, you are ready to Enable Okta FastPass for sign-in.