Okta Personal for Workforce GA Update
We are excited to announce Okta Personal for Workforce is Generally Available (GA) in Production on October 8, 2024. We want to give you a heads up that GA may affect your organization’s default end-user experiences starting in October.
Okta Personal for Workforce is a set of features that integrates Okta Personal* -- Okta’s consumer password manager -- with the Okta Workforce Identity Cloud. Features include:
- End-user interface entry points to encourage employees to save personal apps outside of work tenant and
- Personal app migration to move any existing personal apps from work accounts (admins must enable 'app migration' feature)
- Account switcher to allow employees to use personal and work apps seamlessly while keeping them separate.
- Domain blocking settings for admins to prevent specific domains from being migrated from the work environment.
*All data associated with an Okta Personal account is owned by the end user, not the enterprise organization
Okta Personal for Workforce allows you to offer a free personal password manager to your organization's end users, maintain enterprise security hygiene by removing personal data from work tenants, and encourage users to keep work and personal apps separate.
What is changing?
Starting in October 2024, eligible Okta Workforce organizations will see Okta Personal entry points in their end users’ Workforce dashboard and plugin experiences.
Note: Users will not be able to migrate personal applications out of your tenant unless you enable 'app migration' feature in Okta Personal settings.
Who does this change affect?
This change affects Okta Workforce Identity Cloud organizations that enabled "allow end users to add personal apps" feature in their work environment. If your org enabled the personal apps feature, org admins will receive an email about GA changes in early September.
Okta Personal for Workforce continues to be default-off for:
- Okta for Government Moderate (FedRAMP Moderate), Okta for Government High (FedRAMP High) and Okta for US Military (DOD IL4) environments. These customers are located in the following cells: Moderate is OK5 and OK10; High is OG1 and DoD IL4 is OM1.
- WIC organizations that currently do not allow end users to save personal apps to work tenants.
What is the "allow end users to add personal apps" feature?
If enabled by the admin, this feature allows an organization's end users to add personal apps to their own Okta dashboards. See documentation to enable or disable this feature.
How do I opt out prior to GA?
Before September 30, please fill out the opt-out form to disable Okta Personal for Workforce for your organization. If you have previously completed the opt-out form, your preferences are honored and you do NOT need to complete the form again.
How do I change my admin settings?
After GA, you may change your org preferences or disable Okta Personal for Workforce* at any time through the Okta Admin Console > Customizations > Okta Personal.
*Turning off the saving personal apps feature does not automatically disable Okta Personal for Workforce end-user changes. Please follow instructions to disable the Okta Personal for Workforce feature.
How can I test Okta Personal for Workforce features?
You can see Okta Personal for Workforce features (this is what your end users see in their work account) in your Okta Preview environment. To test Okta Personal as a consumer password manager, you can create a free account on www.okta.com/personal.
My org disabled personal apps. Can I still turn on Okta Personal for Workforce?
Yes, you can go into your Okta Admin Console > Customizations > Okta Personal to enable the feature.Note: Okta Personal for Workforce is not available to Federal customers.
Where can I learn more?
Please visit our website or Okta Personal for Workforce FAQs.
You can also contact us at [email protected].
Okta Personal for Workforce Entry Points
The following features are only visible to end users when the Okta Personal for Workforce setting is enabled:
| Entry point name | Description | Image |
| Generic dashboard banner | A Workforce dashboard entry point into Okta Personal |
|
| Personalized dashboard banner | A Workforce dashboard entry point for users with personal apps, pointing out which personal apps they've saved to their work account and encouraging them to store them in a dedicated, secure Personal account. |
|
| App view dashboard entry point | This entry point into Okta Personal will appear when a user opens the app details of a personal app saved within their Okta Workforce account. |
|
| App save plugin entry point | This entry point into Okta Personal appears when a user logs into a new app or creates a new third party account, prompting them to save their credentials to an Okta Personal account. |
|
| Generic plugin entry point | This entry point into Okta Personal appears when a user opens their Okta Workforce plugin. |
|
| Autofill plugin entry point | This entry point into Okta Personal appears when a user visits a personal site that they have saved to Okta Workforce, prompting them to try saving their personal credentials to Okta Personal instead. |
|
For Admins:
As an admin, this settings page allows you to:
- enable/disable end-user interface updates
- set preferences for app migration: specifically, you can enable/disable app migration and restrict apps with custom email domains from being migrated from Okta Workforce to Okta Personal
