Skip to content

Commit 8962fbf

Browse files
changes
1 parent b3158e5 commit 8962fbf

File tree

1 file changed

+56
-0
lines changed
  • packages/@okta/vuepress-site/docs/guides/device-assurance-policies/main

1 file changed

+56
-0
lines changed

packages/@okta/vuepress-site/docs/guides/device-assurance-policies/main/index.md

+56
Original file line numberDiff line numberDiff line change
@@ -4,4 +4,60 @@ excerpt: How to use the Device Assurance Policies API to manage device assurance
44
layout: Guides
55
---
66

7+
<ApiLifecycle access="ie" /></br>
8+
9+
This guide describes how to use the [Device Assurance Policies API](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/DeviceAssurance/) to manage device assurance policies in your org.
10+
11+
> **Note:** This document is only for Okta Identity Engine. See [Identify your Okta solution](https://help.okta.com/okta_help.htm?type=oie&id=ext-oie-version) to determine your Okta version.
12+
13+
---
14+
15+
#### What you need
16+
17+
* [Okta Developer Edition organization](https://developer.okta.com/signup)
18+
* Grace period enabled
19+
20+
---
21+
22+
## About device assurance policies
23+
24+
Use device assurance policies to check sets of security-related device attributes as part of your [authentication policies](/docs/concepts/policies/#authentication-policies). For example, you can configure a device assurance policy to check whether a specific operating system version or security patch is installed on a device. Then you can permit that device to access Okta-protected resources.
25+
26+
By adding device checks to authentication policy rules, you can establish minimum requirements for the devices that have access to systems and apps in your org.
27+
28+
After you add at least one device assurance policy, you can include it in [authentication policy rules](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/Policy/#tag/Policy/operation/listPolicyRules). You can't apply device assurance policies to users, groups, or devices until you make them part of an authentication policy rule.
29+
30+
## Create a device assurance policy
31+
32+
Use the [Device Assurance Policy API](https://developer.okta.com/docs/api/openapi/okta-management/management/tag/DeviceAssurance/#tag/DeviceAssurance/operation/createDeviceAssurancePolicy) to create a device assurance policy. For this example, we only set the `platform` and `osVersion` parameters.
33+
34+
### About dynamic OS
35+
36+
<ApiLifecycle access="ea" />
37+
38+
39+
40+
41+
### Example POST request
42+
43+
44+
## Edit a device assurance policy
45+
46+
### About grace period and remediation
47+
48+
49+
### Example PUT request
50+
51+
52+
## Add device assurance to an authentication policy
53+
54+
55+
### Example POST rule request
56+
57+
58+
59+
## Check the syslog for device assurance events
60+
61+
### Example GET request
62+
763

0 commit comments

Comments
 (0)