New Device Detection

We are in process of transitioning to OKTA for CIAM , currently we are using a third party tool which gives us device details which we use for device detection and to prompt MFA . Okta gives behavior detection for New Device but it looks like it is for the Client(browser) rather than Device hardware and OS details.

  1. What information Okta uses to detect a New Device ?
  2. Can it do the same for Mobile Native Apps ?

Hello! Okta uses a device token cookie (called DT) for remembering devices in browser flows. So as you suspect, this cannot be utilized for native mobile apps. You can pass your own deviceToken, but we only recommend this if you are calling a secure backend server from your app which then communicates with Okta:

https://developer.okta.com/docs/reference/api/authn/#context-object

1 Like