Deploying an App Configuration for Okta Verify

Technical Articles
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

Deploying an app configuration profile alongside the Okta Verify app ensures that the app is properly configured to function with Platform SSO.

  1. In Jamf Pro, click Computers in the sidebar.
  2. Click Configuration profiles in the sidebar.
  3. Click New.
  4. Click the Application & Custom Settings payload, and then select Upload.
  5. Click Add.
  6. In the Preference Domain field, enter the following value: com.okta.mobile
  7. In the Property List field, enter the following: 
    <?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
  <dict>
    <key>OktaVerify.OrgUrl</key>
    <string>OKTA_URL</string>
    <key>OktaVerify.UserPrincipalName</key>
    <string>$USERNAME</string>
  </dict>
</plist>
    Note:

    Replace OKTA_URL with the Okta domain for your organization.

  8. Click Add.
  9. In the Preference Domain field, enter the following value: com.okta.mobile.auth-service-extension
  10. In the Property List field, enter the following: 
    <?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
 <dict>
    <key>OktaVerify.OrgUrl</key>
    <string>OKTA_URL</string> 
    <key>OktaVerify.UserPrincipalName</key> 
    <string>$USERNAME</string>
    <key>OktaVerify.PasswordSyncClientID</key> 
    <string>SIGNON_CLIENT_ID</string>
    <key>PlatformSSO.ProtocolVersion</key>
    <string>2.0</string> 
 </dict>
</plist>
    Note:

    Replace OKTA_URL with the Okta domain for your organization, and SIGNON_CLIENT_ID with the Platform SSO client ID from your Okta portal.

    Important:

    For computers with macOS 13, replace the 2.0 in the above value with 1.0.

  11. Click Add.
  12. In the Preference Domain field, enter the following value: com.apple.preference.security
  13. In the Property List field, enter the following:
    <dict> <key>dontAllowPasswordResetUI</key> <true/> </dict>
  14. Click the Scope tab, and then configure the target devices or device groups.
  15. Click Save in the bottom-right corner of the pane.

Okta Verify is configured for Platform SSO on target computers with the Okta Verify app installed.