This message was deleted.
# _generals
Slackbot
04/28/2022, 5:38 PMThis message was deleted.
m
Mike Streetz (O_P)
04/28/2022, 6:12 PMI can try, I’ve done a few things in okta
r
RSRevord
04/28/2022, 7:40 PMtrying to figure out a way to identify and group users behind okta policies based on internal nat ip vs egress. redoing an environment to change egress per resource group/silo is a bit of an ask
RSRevord
04/28/2022, 7:41 PMi get its a cloud idp but come on enterprise?
m
Mike Streetz (O_P)
04/28/2022, 7:43 PMhaven’t ever tried to do that, does conditional access not allow you to see that?
Mike Streetz (O_P)
04/28/2022, 7:44 PMI’ve filtered on internal vs external IP for instance
Mike Streetz (O_P)
04/28/2022, 7:45 PMso internal users don’t get asked for MFA for example
Mike Streetz (O_P)
04/28/2022, 7:45 PMyou can create different trusted zones per IP range and apply policy based on zone too
Mike Streetz (O_P)
04/28/2022, 7:46 PMnot sure if that helps
r
RSRevord
04/28/2022, 8:56 PMi am being told the only way is if i bind all the privates in a group that use an specific egress, that okta can't see/aware of internal. Seems odd there sin't a way to configure that
RSRevord
04/28/2022, 8:57 PMbut i am getting everything on what we can/can't do second hand or worse. Thanks, i'll keep digging seems odd there isn't a way
m
Mike Streetz (O_P)
04/28/2022, 9:45 PMOkta can totally differentiate between an internal and external IP range during the initial auth request at least. Don't know if you need to be using the agent or not for that though
r
RSRevord
04/28/2022, 9:56 PMyea i don't see an agent for multiuser
RSRevord
04/28/2022, 9:56 PMand it seems cert based so guessing nonP is a no go
RSRevord
04/28/2022, 9:56 PMnot getting alot of support, thanks give me a few things least to thin it should be doable. Are you using the agent?
m
Mike Streetz (O_P)
04/28/2022, 9:57 PMWe were internally for SSO
Mike Streetz (O_P)
04/28/2022, 9:58 PMThen we switched to the web thing that I cannot for the life of me remember
Mike Streetz (O_P)
04/28/2022, 9:59 PMAgentless desktop sso
Mike Streetz (O_P)
04/28/2022, 9:59 PMSo that might have been how it knew
r
RSRevord
04/28/2022, 10:35 PMyea they are saying agentless doesn't know internal but i'll keep at it
m
Mike Streetz (O_P)
04/28/2022, 11:09 PMI could be wrong! I’m not an okta expert by any means, it may have been telling me the egress IP the whole time
Mike Streetz (O_P)
04/28/2022, 11:10 PMI don't have access to that environment anymore
3 Views