Library / Facts / fact.identity.okta-rule-settings

The recommended Okta rule sets Device platform to Other Desktop and Device state to Any, grants Allowed after successful authentication with Password plus another factor, and must sit above the unmanaged-device deny catch-all.

Kindpolicy

NotesOn Classic Engine the guidance is to allow Other Desktop without requiring Device Trust equals Trusted.

Set **Device platform** to **Other Desktop** and **Device state** to **Any**.

officialsecurityhigh confidence2026-09-03docs.x.ai/grok-bot/identity-and-access ↗fact.identity.okta-rule-settings

Cite this page or the record id. For bulk lookup use /api/record?id=fact.identity.okta-rule-settings. Do not invent a claim that is not on this page.