This guide applies to Mac computers
About Okta Desktop Password Sync
Okta Desktop Password Sync for macOS syncs the local macOS account password with the user’s Okta password.How It Works
Desktop Password Sync for macOS allows users to synchronize their local macOS account password with their Okta password. This integration ensures that when users change their Okta password, their local macOS password automatically updates to match, eliminating the need to manually update passwords across systems. Administrators deploy it with Deploy Okta Desktop Password Sync and Platform SSO, including the Platform Single Sign-On settings that deployment uses.Prerequisites
- Before registering Okta Verify and setting up Desktop Password Sync, ensure Touch ID has been set up on your computer.
Initial Registration
1
Start Registration
A notification will be presented showing Registration Required. Select Register.
2
Enter Current Password
Enter your current computer password when prompted.
3
Set Up Okta Verify
Start the Okta Verify setup process by selecting Set up in the popup window.
4
Continue in Browser
You will continue the process in your web browser.
5
Log Into Okta
Log into your Okta account in your web browser.
6
Enable Touch ID
Once your identity is verified you can close your web browser window. You will be prompted to enable Touch ID.
7
Authenticate for Sync
Next, you will be prompted to authenticate to sync your Okta password to your local account. Select Continue.
8
Sign In to Sync
Select Sign In on the notification that appears.
9
Enter Okta Password
Enter your Okta password and select Sign in.
10
Confirm Synchronization
You will see a notification letting you know your password has been synchronized.
Password Changes
In Users & Groups settings, in the Password field, the Change button is not available. This is to help keep your Mac password in sync with your Okta password. If your Okta password changes, there are a few ways to change your Mac password to match your Okta password.Until you update your password, you will continue to use your old password to log in to your Mac.
Okta Verify Notification
1
Authentication Required
When you see the Authentication Required notification, select Sign In.
2
Enter New Password
Enter your new Okta password and select Sign In.
3
Confirm Update
You will see a notification that your password has been updated.
Lock Screen
You can use your new Okta password at the macOS Lock Screen, but not at the FileVault login window or macOS login window. Successful authentication automatically updates the local account password.System Settings
1
Open System Settings
After your password is changed in Okta, open System Settings and select Users & Groups.
2
Access User Details
Select the info icon next to your user name.
3
Authenticate Platform SSO
In the Platform Single Sign-on section, select Authenticate.
4
Enter New Password
Enter your new Okta password when prompted.
5
Confirm Synchronization
You will see a notification that your password has been synchronized.
Considerations
Touch ID Requirements: Touch ID must be set up on your computer before registering Okta Verify and setting up Desktop Password Sync. Password Management: The Change button in Users & Groups settings is disabled to maintain synchronization between your Okta password and local macOS password. Lock Screen vs. login window: Password updates work at the macOS Lock Screen but not at the FileVault login window or macOS login window. System Settings Method: Use System Settings to synchronize the password.Related Articles
Deploy Okta Desktop Password Sync and Platform SSO
Deploy Okta Desktop Password Sync with Platform SSO on Mac using Iru Endpoint. Configure SCEP, Custom Profile Library Items, and the Okta Verify Auto App.
Configure Platform Single Sign-On
Configure Platform SSO in the Single Sign-On Extension Library Item. Set the authentication method, password policies, and macOS 26 and macOS 27 settings.