Okta Verify configurations for Android devices

You can use your Mobile Device Management (MDM) solution to deploy Okta Verify configurations to domains. The configurations enable Okta Verify functionality.

Use the following keys and values to configure Okta Verify:

domainName

Use this configuration to pre-populate the sign-in URL so that end users don't have to enter this value when they add an Okta Verify account.

Value [String] Description

<org_sign-in_URL>

The sign-in URL for your org.

For example, example-okta.login.adsbillinghub.com.

This configuration is available in Okta Verify 7.2.0 and later.

managementHint

Use this configuration to specify a secret key, which indicates that a device is managed.

Value [String] Description

<secret_key>

The secret key for management attestation.

See Integrate Okta with your MDM software.

OktaVerify.AuthenticatorOperationMode

Early Access release

Use this configuration on shared devices to block user enrollments in Okta Verify.

Value [String] Description

Shared

Blocks user enrollments on the device. Use this value for shared devices.

This configuration is available in Okta Verify 9.8.3 and later.

OktaVerify.AutoRegistration

Early Access release

Enables Sensor Mode on managed devices.

Sensor Mode allows devices to register in Okta through a device registration secret and send device signals without requiring user enrollment.

By default, this setting isn't enabled.

Value [String] Description

DEVICE

Enables Sensor Mode at the device level. The value isn't case sensitive.

This configuration is available in Okta Verify 9.8.3 and later.

OktaVerify.DeviceRegistrationSecret

Early Access release

Use this configuration to specify the device registration secret that lets a managed device register with Okta without a user.

Configure this setting together with OktaVerify.AutoRegistration set to DEVICE, domainName, and OktaVerify.SerialNumber.

Value [String] Description

<secret_value>

The value of the device registration secret. Okta shows this value only once, when you create the secret. See Create a device registration secret.

This configuration is available in Okta Verify 9.8.3 and later.

OktaVerify.EnrollmentOptions

Early Access release

Configure whether users are prompted to enroll in Okta Verify. For shared devices that use Sensor Mode, set the value to Disabled. This option isn't required, and it has no default value. The values aren't case sensitive.

Value [String] Description

SilentEnrollmentDisabled

Users are prompted to enroll in Okta Verify if they sign in with Okta FastPass but don't yet have an Okta Verify account on their device.

Enabled

Users are prompted to add an Okta Verify account if the app is running and they try to access a resource that has a registered or managed device condition.

Disabled

Users aren't prompted to enroll in Okta Verify. Use this value for shared devices that use Sensor Mode.

This configuration is available in Okta Verify 9.8.3 and later.

OktaVerify.SerialNumber

Enable the collection of serial identifiers on managed devices.

Value [String] Description

<serial_number>

A predefined macro provided by the MDM provider.

For details, check the requirements of your MDM provider.

If the MDM configuration doesn't provide this value, Okta Verify reports an empty value.

ReportApplicationPerformance

Configure the collection of app performance reports.

Value [Boolean] Description

true

Performance reports are collected.

This is the default.

false

Performance reports aren't collected.

Choosing this value might affect the Okta team's ability to assist with troubleshooting.

This configuration is available in Okta Verify 7.42.0 and later.

ReportBugs

Configure whether users can submit bug reports.

Value [Boolean] Description

true

Users can submit feedback and include bug reports.

This is the default.

false

The Send feedback menu is unavailable.

Choosing this value might affect the Okta team's ability to assist with troubleshooting.

This configuration is available in Okta Verify 7.42.0 and later.

ReportCrashLogs

Configure the inclusion of console logs in crash reports.

Value [Boolean] Description

true

Crash reports include console logs.

This is the default.

false

Crash reports don't include console logs.

Choosing this value might affect the Okta team's ability to assist with troubleshooting.

This configuration is available in Okta Verify 7.42.0 and later.

ReportDiagnostics

Configure the app diagnostics collection.

Value [Boolean] Description

true

App use diagnostics such as non-fatal errors are recorded.

This is the default.

false

Diagnostics of app use are disabled.

Choosing this value might affect the Okta team's ability to assist with troubleshooting.

This configuration is available in Okta Verify 7.42.0 and later.

ReportLocalFileLog

Configure local file logging and export.

Value [Boolean] Description

true

Users can save logs locally and export them from the Send feedback menu.

This is the default.

false

Logs aren't included when users submit feedback.

Choosing this value might affect the Okta team's ability to assist with troubleshooting.

This configuration is available in Okta Verify 7.42.0 and later.