Adaptive Multi-factor Authentication
Enhance the security of your app with contextual step-up authentication using a broad set of second factors.
of US CISOs name MFA as top IAM priority
of hacking incidents used stolen or weak passwords
annual loss as a result of account takeover
Are you a developer?
Contextual policies
Enforce MFA only when it is necessary based on a wide array of signals
Embeddable MFA
Embed branded, strong authentication for customers, including passwordless authentication
Robust reporting
Leverage user AMFA history for account takeover investigations or risk analysis
Contextual policies
Enforce MFA only when it is necessary based on a wide array of signals.
Contextual access management
Set intelligent access and authentication policies based on login context
Location Context
- New city, state, or country
- New geo-location
- Impossible travel patterns
Device Context
- Known device recognition
- Device management
Network Context
- New IP
- Specified IP zones
- Network anonymisers
Risk Context
Create policies based on risk signals seen across Okta’s global dataset, such as high risk IP addresses
Respond to anomalous login behaviour with risk-based authentication
Okta’s machine learning capabilities allow you to minimise the need for prescriptively creating access policies. With Risk-Based Authentication, Okta establishes a baseline login behaviour for each individual user, and responds to anomalous activity with the appropriate set of strong factors for both high and low risk login attempts.
Password only
Password + Okta Verify with Push
Okta Verify + U2F
Passwordless authentication
Eliminate the risk of password-based attacks and deliver a delightful user experience using passwordless authentication.
Leverage a range of passwordless authentication options for customers using email magic links, WebAuthN or factor sequencing.
Passwordless authentication helps you:
- Secure account authentication from credential attacks
- Simplify user enrolment
- Delight users with one-click or one-touch authentication
- Reduce support costs associated with password management and account recovery
Explore passwordless authentication ›
Deploy policies by group
Add high risk users to specific groups that can be used to deploy AMFA policy based on risk or business policy
Pre-authentication sign-on policy evaluation
Stop brute force attacks in its tracks by evaluating Okta’s sign-on policies before credential evaluation thereby reducing the likelihood of account lockouts and improving user experience.
Embeddable MFA
Add a second level of security to your application with multi-factor authentication
Support for a range of factors
Developer and operationally efficient
Devices
Okta devices enable seamless management of user devices and secure authentication across devices or channels.
Devices API
Bind user and device identity in Okta’s universal directory and store a user’s known devices. The Devices API enables authentication across devices using a trusted/registered device, allows admins and users to manage devices.
Devices SDK
Leverage Okta devices SDK to automatically register a user’s devices automatically, Whitelabel Okta Verify Push with biometrics (FaceID etc) and enable passwordless authentication across devices and channels using a trusted device.
Robust reporting
Leverage user AMFA history for account takeover investigations or risk analysis
Real-time dashboard and system log
Real-time visibility and anomalous behaviour reports. Push real-time events to security tools and communication channels with Event Hooks.
Trusted by
