Introduction

With Okta, by setting authentication policies/rules for each application, you can change the authentication factors required for access for each linked application. In this article, we will use Microsoft Office 365, Box, and Okta Admin Console as examples to demonstrate use cases for setting different authentication factors when accessing each.
In addition, this article introduces the authentication factor settings for each application, but this article introduces "Okta's session lifetime and authentication factor requirements according to it", so let's talk about Okta. I want to know more! If you are interested, please take a look.

Authentication factors required for each application

Configure the authentication factors required when accessing Microsoft Office 365, Box, and Okta Admin Console as shown below.

• Microsoft Office 365: Password only
• Box: Okta Verify only
• Okta Admin Console：Password + Okta Verify

Okta authentication policy settings

By setting the authentication policy as follows for each application of Microsoft Office 365, Box, and Okta Admin Console on Okta, the above authentication can be achieved.

Authentication policy for Microsoft Office 365

Authentication Policy for Box

Authentication Policy for Okta Admin Console

Actual authentication behavior

Authentication flow when accessing Microsoft Office 365

Authentication flow when accessing Box

Authentication flow when accessing the Okta Admin Console

Summary

I hope you understand Okta's authentication policy. With Okta, you can freely manage security for each application by changing the authentication factor for each application, as in the use case above.
If you are interested or have any other inquiries about Okta, please contact us.