An error occurred:

Okta Identity as a Service (IDaaS) STIG

Okta Identity as a Service (IDaaS) Security Technical Implementation Guide

ID Vuln ID Title Cat Status
OKTA-APP-000020 V-273186 Okta must log out a session after a 15-minute period of inactivity. Cat II
OKTA-APP-000025 V-273187 The Okta Admin Console must log out a session after a 15-minute period of inactivity. Cat II
OKTA-APP-000090 V-273188 Okta must automatically disable accounts after a 35-day period of account inactivity. Cat II
OKTA-APP-000170 V-273189 Okta must enforce the limit of three consecutive invalid login attempts by a user during a 15-minute time period. Cat II
OKTA-APP-000180 V-273190 The Okta Dashboard application must be configured to allow authentication only via non-phishable authenticators. Cat II
OKTA-APP-000190 V-273191 The Okta Admin Console application must be configured to allow authentication only via non-phishable authenticators. Cat II
OKTA-APP-000200 V-273192 Okta must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the application. Cat II
OKTA-APP-000560 V-273193 The Okta Admin Console application must be configured to use multifactor authentication. Cat I
OKTA-APP-000570 V-273194 The Okta Dashboard application must be configured to use multifactor authentication. Cat I
OKTA-APP-000650 V-273195 Okta must enforce a minimum 15-character password length. Cat II
OKTA-APP-000670 V-273196 Okta must enforce password complexity by requiring that at least one uppercase character be used. Cat II
OKTA-APP-000680 V-273197 Okta must enforce password complexity by requiring that at least one lowercase character be used. Cat II
OKTA-APP-000690 V-273198 Okta must enforce password complexity by requiring that at least one numeric character be used. Cat II
OKTA-APP-000700 V-273199 Okta must enforce password complexity by requiring that at least one special character be used. Cat II
OKTA-APP-000740 V-273200 Okta must enforce 24 hours/one day as the minimum password lifetime. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.