Okta FastPass

<!DOCTYPE html> <html xmlns:MadCap="http://www.madcapsoftware.com/Schemas/MadCap.xsd" lang="en-us" xml:lang="en-us" class="_Skins_okta_html5_topnav_nav_poc" data-mc-search-type="Stem" data-mc-help-system-file-name="okta_help.xml" data-mc-path-to-help-system="../../../../../" data-mc-has-content-body="True" data-mc-searchable="True" data-mc-toc-path="" data-mc-target-type="WebHelp2" data-mc-runtime-file-type="Topic;Default" data-mc-preload-images="false" data-mc-in-preview-mode="false"> <head> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta name="typeofcontent" content="documentation" /> <meta name="audience" content="OIE Admins" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta name="description" content="Learn more about" /> <meta name="viewport" content="width=device-width, height=device-height" /><title>Okta FastPass</title> <link rel="canonical" href="https://help.okta.com/oie/en-us/content/topics/identity-engine/devices/fp/fp-main.htm" /> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <link rel="shortcut icon" href="../../../../Resources/Images/favicon.ico" type="image/x-icon" />       <link href="../../../../../Skins/Default/Stylesheets/Slideshow.css" rel="stylesheet" type="text/css" data-mc-generated="True" /> <link href="../../../../../Skins/Default/Stylesheets/TextEffects.css" rel="stylesheet" type="text/css" data-mc-generated="True" /> <link href="../../../../../Skins/Default/Stylesheets/Topic.css" rel="stylesheet" type="text/css" data-mc-generated="True" /> <link href="../../../../../Skins/Default/Stylesheets/Components/Styles.css" rel="stylesheet" type="text/css" data-mc-generated="True" /> <link href="../../../../../Skins/Default/Stylesheets/Components/Tablet.css" rel="stylesheet" type="text/css" data-mc-generated="True" /> <link href="../../../../../Skins/Default/Stylesheets/Components/Mobile.css" rel="stylesheet" type="text/css" data-mc-generated="True" /> <link href="../../../../../Skins/Default/Stylesheets/Components/Print.css" rel="stylesheet" type="text/css" data-mc-generated="True" /> <link href="../../../../../Skins/Fluid/stylesheets/foundation.6.2.3.css" rel="stylesheet" type="text/css" data-mc-generated="True" /> <link href="../../../../../Skins/Fluid/stylesheets/styles.css" rel="stylesheet" type="text/css" data-mc-generated="True" /> <link href="../../../../../Skins/Fluid/stylesheets/tablet.css" rel="stylesheet" type="text/css" data-mc-generated="True" /> <link href="../../../../../Skins/Fluid/stylesheets/mobile.css" rel="stylesheet" type="text/css" data-mc-generated="True" /> <link href="../../../../../Skins/Fluid/stylesheets/print.css" rel="stylesheet" type="text/css" data-mc-generated="True" /> <link rel="stylesheet" href="https://static.cloud.coveo.com/searchui/v2.5395/css/CoveoFullSearchNewDesign.css" /> <style>/*<meta />*/ .button.select-language-button { -pie-background: linear-gradient(#ffffff, #ffffff); } .needs-pie { behavior: url('../../../../../Resources/Scripts/PIE-no-motw.htc'); } </style> <link href="../../../../resources/stylesheets/okta-main-new-nav.css" rel="stylesheet" type="text/css" /> <script src="../../../../../Resources/Scripts/jquery.min.js" type="text/javascript"> </script> <script src="../../../../../Resources/Scripts/purify.min.js" type="text/javascript" defer="defer"> </script> <script src="../../../../../Resources/Scripts/require.min.js" type="text/javascript"> </script> <script src="../../../../../Resources/Scripts/require.config.js" type="text/javascript" defer="defer"> </script> <script src="../../../../../Resources/Scripts/foundation.6.2.3_custom.js" type="text/javascript"> </script> <script src="../../../../../Resources/Scripts/plugins.min.js" type="text/javascript" defer="defer"> </script> <script src="../../../../../Resources/Scripts/MadCapAll.js" type="text/javascript" defer="defer"> </script> <script> /* <![CDATA[ */ (function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-NMZZV4P'); /* ]]> */ </script> <script> /* <![CDATA[ */ (function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-KXMLV58'); /* ]]> */ </script> <script> /* <![CDATA[ */ (function(apiKey){ (function(p,e,n,d,o){var v,w,x,y,z;o=p[d]=p[d]||{};o._q=o._q||[]; v=['initialize','identify','updateOptions','pageLoad','track'];for(w=0,x=v.length;w<x;++w)(function(m){ o[m]=o[m]||function(){o._q[m===v[0]?'unshift':'push']([m].concat([].slice.call(arguments,0)));};})(v[w]); y=e.createElement(n);y.async=!0;y.src='https://cdn.pendo.io/agent/static/'+apiKey+'/pendo.js'; z=e.getElementsByTagName(n)[0];z.parentNode.insertBefore(y,z);})(window,document,'script','pendo'); pendo.initialize({ visitor: { id: 'VISITOR-UNIQUE-ID' }, account: { id: 'ACCOUNT-UNIQUE-ID' } }); })('a9bd3885-93ae-46ab-700b-dd29e613c19d'); /* ]]> */ function openSurvey() { window.open('https://surveys.okta.com/jfe/form/SV_e4L0iW8a3tz8Yol?source=' + encodeURIComponent(document.location.href), '_blank'); } </script> </head> <body> <div class="foundation-wrap off-canvas-wrapper"> <div class="off-canvas-wrapper-inner" data-off-canvas-wrapper=""> <aside class="off-canvas position-right" role="navigation" id="offCanvas" data-off-canvas="" data-position="right" data-mc-ignore="true"> <ul class="off-canvas-drilldown vertical menu off-canvas-list" data-drilldown="" data-mc-back-link="Back" data-mc-css-tree-node-expanded="is-drilldown-submenu-parent" data-mc-css-tree-node-collapsed="is-drilldown-submenu-parent" data-mc-css-sub-menu="vertical menu slide-in-right is-drilldown-submenu" data-mc-include-indicator="False" data-mc-include-icon="False" data-mc-include-parent-link="True" data-mc-include-back="True" data-mc-defer-expand-event="True" data-mc-expand-event="click.zf.drilldown" data-mc-toc="True"> </ul> </aside> <div class="off-canvas-content inner-wrap" data-off-canvas-content=""> <div data-sticky-container="" class="title-bar-container"> <nav class="title-bar tab-bar sticky" role="banner" data-sticky="" data-options="marginTop:0" style="width:100%" data-sticky-on="only screen and (max-width: 1024px)" data-mc-ignore="true"><a class="skip-to-content fluid-skip showOnFocus" href="#">Skip To Main Content</a> <div class="middle title-bar-section outer-row clearfix"> <div class="menu-icon-container relative clearfix"> <div class="central-account-wrapper"> <div class="central-dropdown"><a class="central-account-drop"><span class="central-account-image"></span><span class="central-account-text">Account</span></a> <div class="central-dropdown-content"><a class="MCCentralLink central-dropdown-content-settings">Settings</a> <hr class="central-separator" /><a class="MCCentralLink central-dropdown-content-logout">Logout</a> </div> </div> </div> <button class="menu-icon" aria-label="Show Navigation Panel" data-toggle="offCanvas"><span></span> </button> </div> </div> <div class="title-bar-layout outer-row"> <div class="logo-wrapper"><a class="logo" href="https://help.okta.com/okta_help.htm?id=csh-index" alt="Okta"></a> </div> <div class="navigation-wrapper nocontent"> <ul class="navigation clearfix" role="navigation" data-mc-css-tree-node-has-children="has-children" data-mc-css-sub-menu="sub-menu" data-mc-expand-event="mouseenter" data-mc-top-nav-menu="True" data-mc-max-depth="2" data-mc-include-icon="False" data-mc-include-indicator="False" data-mc-include-children="True" data-mc-include-siblings="True" data-mc-include-parent="True" data-mc-toc="True"> <li class="placeholder" style="visibility:hidden"><a>placeholder</a> </li> </ul> </div> <div class="central-account-wrapper"> <div class="central-dropdown"><a class="central-account-drop"><span class="central-account-image"></span><span class="central-account-text">Account</span></a> <div class="central-dropdown-content"><a class="MCCentralLink central-dropdown-content-settings">Settings</a> <hr class="central-separator" /><a class="MCCentralLink central-dropdown-content-logout">Logout</a> </div> </div> </div> <div class="nav-search-wrapper"> <div class="nav-search row"> <form class="search" action="#"> <div class="search-bar search-bar-container needs-pie"> <input class="search-field needs-pie" type="search" aria-label="Search Field" placeholder="Search" /> <div class="search-filter-wrapper"><span class="invisible-label" id="search-filters-label">Filter: </span> <div class="search-filter" aria-haspopup="true" aria-controls="sf-content" aria-expanded="false" aria-label="Search Filter" title="All Files" role="button" tabindex="0"> </div> <div class="search-filter-content" id="sf-content"> <ul> <li> <button class="mc-dropdown-item" aria-labelledby="search-filters-label filterSelectorLabel-00001"><span id="filterSelectorLabel-00001">All Files</span> </button> </li> </ul> </div> </div> <div class="search-submit-wrapper" dir="ltr"> <div class="search-submit" title="Search" role="button" tabindex="0"><span class="invisible-label">Submit Search</span> </div> </div> </div> </form> </div> </div> </div> </nav> </div> <div class="main-section"> <div class="row outer-row sidenav-layout"> <nav class="sidenav-wrapper"> <div class="sidenav-container"> <ul class="off-canvas-accordion vertical menu sidenav" data-accordion-menu="" data-mc-css-tree-node-expanded="is-accordion-submenu-parent" data-mc-css-tree-node-collapsed="is-accordion-submenu-parent" data-mc-css-sub-menu="vertical menu accordion-menu is-accordion-submenu nested" data-mc-include-indicator="False" data-mc-include-icon="False" data-mc-include-parent-link="False" data-mc-include-back="False" data-mc-defer-expand-event="True" data-mc-expand-event="click.zf.accordionMenu" data-mc-toc="True" data-mc-side-nav-menu="True"> </ul> </div> </nav> <div class="body-container"> <div data-mc-content-body="True">  <noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-NMZZV4P" height="0" width="0" style="display:none;visibility:hidden"></iframe> </noscript>   <noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-KXMLV58" height="0" width="0" style="display:none;visibility:hidden"></iframe> </noscript>   <div id="coveo_org_id" style="Display:None"><span class="mc-variable okta-coveo-config.OrgId variable">oktaproduction9ounvcxa</span> </div> <div id="coveo_rest_uri" style="Display:None"><span class="mc-variable okta-coveo-config.PlatformRestUri variable">https://platform.cloud.coveo.com/rest/search</span> </div> <div id="coveo_search_url" style="Display:None"><span class="mc-variable okta-coveo-config.SearchPageUrl variable">https://support.okta.com/help/s/global-search/%40uri</span> </div> <div id="coveo_token_url" style="Display:None"><span class="mc-variable okta-coveo-config.SearchTokenServiceUrl variable">https://support.okta.com/help/services/apexrest/PublicSearchToken?site=help</span> </div> <div id="coveo_dev_org_id" style="Display:None"><span class="mc-variable okta-coveo-config.DevOrgId variable">oktanonproduction1il1gtac7</span> </div> <div id="coveo_token_url_dev" style="Display:None"><span class="mc-variable okta-coveo-config.SearchTokenServiceUrlDev variable">https://qo2dt8ecve.execute-api.us-west-2.amazonaws.com/dev/token?site=help</span> </div>    <div id="OLC_Coveo_Headline" class="coveo-headline-wrapper" data-mc-conditions="MultiProdPublish.SearchBar"> <div class="slds-p-vertical_small">  <div class="slds-grid slds-grid_align-center"> <div id="customSelect" class="CoveoCustomSelect slds-float_right"> </div> <div id="standaloneSearchbox"> <div class="CoveoAnalytics" data-search-hub="OktaCommunityFullSearch"> </div> <div class="CoveoTab" data-id="Help" data-caption="Help" style="display:none"> </div> <div class="CoveoSearchbox" data-enable-omnibox="true" data-enable-query-suggest-addon="true"> </div> </div> </div> </div> </div> <div class="replace_top_nav"> <div class="navbar" data-mc-conditions="Primary.live-site-only"> <div class="dropdown" data-test="menuBarCategory" id="documentationMenu" data-mc-conditions="MultiProdPublish.DocMenu"> <button class="dropbtn">Documentation <em class="fa fa-caret-down"></em></button> <div class="dropdown-content" data-test="menuBarItems"> <div><a href="https://help.okta.com/okta_help.htm?type=oie&id=oie-index" data-test="menuBarLink">Identity Engine</a> </div> <div><a href="https://help.okta.com/okta_help.htm?id=index-admin" data-test="menuBarLink">Classic Engine</a> </div> <div><a href="https://help.okta.com/okta_help.htm?type=oag&id=ext_oag_main" data-test="menuBarLink">Access Gateway</a> </div> <div><a href="https://help.okta.com/okta_help.htm?type=asa&id=csh-asa-overview" data-test="menuBarLink">Advanced Server Access</a> </div> <div><a href="https://help.okta.com/okta_help.htm?type=wf&id=ext-Okta-workflows" data-test="menuBarLink">Workflows</a> </div> </div> </div> <div class="dropdown" data-test="menuBarCategory" id="relnotesMenu" data-mc-conditions="MultiProdPublish.DocMenu"> <button class="dropbtn">Release notes <em class="fa fa-caret-down"></em></button> <div class="dropdown-content" data-test="menuBarItems"> <div><a href="https://help.okta.com/okta_help.htm?type=oie&id=csh-oie-release-notes" data-test="menuBarLink">Identity Engine</a> </div> <div><a href="https://help.okta.com/okta_help.htm?id=ext_okta_relnotes" data-test="menuBarLink">Classic Engine</a> </div> <div><a href="https://help.okta.com/okta_help.htm?type=oag&id=ext_oag_releasenotes" data-test="menuBarLink">Access Gateway</a> </div> <div><a href="https://help.okta.com/okta_help.htm?type=asa&id=ext-asa-releasenotes" data-test="menuBarLink">Advanced Server Access</a> </div> <div><a href="https://help.okta.com/okta_help.htm?type=wf&id=ext-workflows-releasenotes" data-test="menuBarLink">Workflows</a> </div> </div> </div> <div class="dropdown" data-test="menuBarCategory" id="oktaDevDocsMenu"><a href="https://developer.okta.com/" target="_blank" data-test="menuBarLink">Okta Developer</a> </div> <div class="dropdown" data-test="menuBarCategory" id="auth0Menu"><a href="https://auth0.com/docs" target="_blank" data-test="menuBarLink">Auth0</a> </div> <div class="dropdown" data-test="menuBarCategory" id="trainingMenu"><a href="https://www.okta.com/services/training/" target="_blank" data-test="menuBarLink">Training</a> </div> <div class="dropdown" data-test="menuBarCategory" id="supportMenu"><a href="https://support.okta.com/help/s/?language=en_US" target="_blank" data-test="menuBarLink">Support</a> </div> </div> <div class="logo_container" id="OktaBanner" data-mc-conditions="Primary.live-site-only"><a class="logo" href="https://help.okta.com/okta_help.htm?id=csh-index" data-test="OktaBanner"><img src="../../../../resources/images/okta-assets/logo.png" alt="Okta Docs" title="Okta Docs" data-test="OktaBannerImg" /></a> </div> <div class="toolbar-main" data-test="toolBar" data-mc-conditions="Primary.live-site-only"> <div class="buttons popup-container clearfix topicToolbarProxy _Skins_okta_toolbar_no_expand mc-component nocontent" style="mc-topic-toolbar-items: ;"> <div class="button-group-container-left"> <button class="button needs-pie select-language-button" title="Change language"> <div> <div role="img" class="button-icon-wrapper" aria-label="Change language"> <div class="button-icon"> </div> </div> </div> </button> </div> </div> </div> </div>  <div class="okta-topics" data-test="bodyWrapper">  <div> <div class="is-not-in-mobile">  <div class="nocontent"> <div class="MCBreadcrumbsBox_0 breadcrumbs" role="navigation" aria-label="Breadcrumbs" data-mc-breadcrumbs-divider=" > " data-mc-breadcrumbs-count="3" data-mc-toc="True"> </div> </div> </div> <div class="oie-label" data-mc-conditions="MultiProdPublish.OIE"> <img class="oie-label" title="Label: Okta Identity Engine content" src="../../../../resources/images/okta-assets/identity_engine.svg" /> </div> <div class="body-main" data-test="bodyContent">  <div role="main" id="mc-main-content"> <h1><a name="MinServiceReqts"></a><span class="mc-variable okta-feature-names.Okta_FastPass variable">Okta FastPass</span> </h1> <p><span class="mc-variable okta-feature-names.Okta_FastPass variable">Okta FastPass</span> is a phishing-resistant, passwordless authenticator. It enables secure access to <span class="mc-variable okta-variables.ProductName variable">Okta</span>-protected apps across all supported platforms on managed and unmanaged devices. To use <span class="mc-variable okta-feature-names.Okta_FastPass variable">Okta FastPass</span>, users must install the latest version of the <span class="mc-variable okta-feature-names.Okta_Verify variable">Okta Verify</span> app and create an account on their desktops, laptops, or mobile devices. <span class="mc-variable okta-feature-names.Okta_Verify variable">Okta Verify</span> with <span class="mc-variable okta-feature-names.Okta_FastPass variable">Okta FastPass</span> support is available for Android, iOS, macOS, and Windows.</p> <h2>Benefits</h2> <dl> <dt>Phishing-resistant authentication</dt> <dd>You can configure phishing-resistant constraints in your authentication policy rules. When users sign in to apps, <span class="mc-variable okta-feature-names.Okta_FastPass variable">Okta FastPass</span> verifies that the authentication request doesn't come from a malicious site. You can also configure a phishing-resistant authenticator enrollment for your users.</dd> <dt>Passwordless authentication</dt> <dd><span class="mc-variable okta-feature-names.Okta_FastPass variable">Okta FastPass</span> uses public key cryptography to authenticate users. By eliminating the need for passwords, <span class="mc-variable okta-feature-names.Okta_FastPass variable">Okta FastPass</span> provides user-friendly authentication while reducing the risk of security incidents and the IT costs associated with factor enrollment and reset.</dd> <dt>Device posture evaluation</dt> <dd>For increased security, you can use device assurance policies to configure access to resources based on device attributes such as operating system and screen lock. During authentication, <span class="mc-variable okta-feature-names.Okta_FastPass variable">Okta FastPass</span> collects security signals from <span class="mc-variable okta-variables.ProductName variable">Okta</span> and third-party sources and evaluates the device posture according to the device assurance policy rules. Compliant devices are granted access to resources. On non-compliant devices, users are denied access unless they complete remediation actions.</dd> <dt>Consistent user experience</dt> <dd><span class="mc-variable okta-feature-names.Okta_FastPass variable">Okta FastPass</span> works with OIDC, SAML, and WS-Federation apps protected by <span class="mc-variable okta-variables.ProductName variable">Okta</span>. It integrates with built-in device authenticators such as Windows Hello, Touch ID, or Face ID to facilitate biometric authentication. <span class="mc-variable okta-feature-names.Okta_FastPass variable">Okta FastPass</span> is supported on managed and unmanaged devices on Android, iOS, macOS, and Windows. </dd> </dl> <h2>How it works</h2> <p>In the following example, users authenticate with <span class="mc-variable okta-feature-names.Okta_FastPass variable">Okta FastPass</span> without providing a username or password.</p> <p> <img src="../../../../resources/images/devices/fp-overview.png" alt="This flow shows how users authenticate silently with Okta FastPass." /> </p> <ol> <li value="1">The user initiates an authentication request by accessing an <span class="mc-variable okta-variables.ProductName variable">Okta</span>-protected app.</li> <li value="2">The <span class="mc-variable okta-variables.ProductName variable">Okta</span> server issues a unique challenge for the authentication request.</li> <li value="3">The <span class="mc-variable okta-feature-names.Sign-In_Widget variable">Sign-In Widget</span> on the browser or an OS-specific app forwards that challenge to <span class="mc-variable okta-feature-names.Okta_Verify variable">Okta Verify</span> with <span class="mc-variable okta-feature-names.Okta_FastPass variable">Okta FastPass</span> enabled (installed on the same device).</li> <li value="4"><span class="mc-variable okta-feature-names.Okta_FastPass variable">Okta FastPass</span> collects device signals, generates a response, and signs it with the proof of possession private key that was issued during user enrollment.</li> <li value="5"><span class="mc-variable okta-feature-names.Okta_FastPass variable">Okta FastPass</span> sends the response to the server.</li> <li value="6">The <span class="mc-variable okta-variables.ProductName variable">Okta</span> server validates the signature and confirms that the response corresponds to the unique challenge that was issued.</li> <li value="7">The <span class="mc-variable okta-variables.ProductName variable">Okta</span> policies are evaluated based on the device context collected. If the policy conditions are met, the user is granted access to the app.</li> </ol> <h2>Get started</h2> <p><a href="fp-configure.htm" class="MCXref xref">Configure Okta FastPass</a> </p> </div> </div> </div> </div>   <div class="footer2" data-test="footer"> <div> <p class="copyright" data-test="copyrightNotice">漏 <span class="mc-variable okta-variables.Year variable">2024</span> <span class="mc-variable okta-variables.CompanyName variable">Okta, Inc</span>. All Rights Reserved. Various trademarks held by their respective owners. </p> </div> </div>  <script src="../../../../resources/scripts/js/ignore-dompurify.js"> </script> <script src="../../../../resources/scripts/js/app.js"> </script> <script src="../../../../resources/scripts/js/vendor/what-input.js"> </script> <script src="https://cdnjs.cloudflare.com/ajax/libs/foundation/6.4.4-rc1/js/foundation.min.js"> </script>  <script src="https://static.cloud.coveo.com/searchui/v2.5395/js/CoveoJsSearch.Lazy.min.js" defer="defer"> </script> <script src="../../../../resources/scripts/coveo-resources/js/cultures/en.js" id="coveoCultureScript" defer="defer"> </script> <script src="../../../../resources/scripts/coveo-resources/js/coveo.madcapflare.requirejs.js" id="coveoRequireScript" defer="defer"> </script> <script src="../../../../resources/scripts/coveo-resources/js/coveo.madcapflare.okta.js" id="coveoInitscript" defer="defer"> </script>  <div id="feedback-tab" data-mc-conditions="Primary.live-site-only"><a id="feedback-link" href="#" onclick="openSurvey(); return false" target="_blank" title="Submit feedback"><div id="feedback-container"><p id="feedback-text" translate="no">Feedback</p></div></a> </div> </div> </div> </div> </div><a data-close="true"></a> </div> </div> </div> </body> </html>

CINXE.COM

Okta FastPass