Overview
Devices in Okta represent the physical or virtual devices that users use to authenticate and access the Okta organization. Devices can optionally be managed by 3rd party MDM solutions, which allow administrators to enforce security compliance policies.
Devices are represented as Okta_Device nodes in BloodHound.
Edges
The tables below list edges defined by the Okta extension only. Additional edges to or from this node may be created by other extensions.
Inbound Edges
Outbound Edges
| Edge Type | Destination Node Types | Traversable |
|---|
| Okta_DeviceOf | Okta_User | ❌ |
Properties
| Name | Source | Type | Description |
|---|
id | device.uuid + "@" + okta_domain or device.id | string | Unique device identifier (derived from hardware ID + domain). |
name | device.resourceDisplayName | string | Device display name from Okta. |
display_name | device.resourceDisplayName | string | Display label used in BloodHound. |
okta_domain | Collector context (non-API) | string | Okta organization domain where the device exists. |
okta_id | device.id | string | Original Okta device identifier (stored for reference). |
created | device.created | datetime | Device record creation timestamp. |
last_updated | device.lastUpdated | datetime | Last update timestamp. |
status | device.status | string | Device lifecycle/status value. |
resource_type | device.resourceType | string | Okta device resource type. |
platform | device.profile.platform | string | Device platform/OS family. |
manufacturer | device.profile.manufacturer | string | Hardware vendor/manufacturer. |
model | device.profile.model | string | Device model name. |
os_version | device.profile.osVersion | string | Operating system version. |
registered | device.profile.registered | bool | Whether the device is registered in Okta. |
secure_hardware_present | device.profile.secureHardwarePresent | bool | Indicates secure hardware support (for example Secure Enclave/TPM). |
jail_break | device.profile.integrityJailbreak | bool | Device jailbreak/root integrity signal. |
udid | device.profile.udid | string | Apple UDID for iOS devices. |
object_sid | device.profile.sid | string | SID attribute for Windows/AD-linked devices. |
serial_number | device.profile.serialNumber | string | Device serial number, when provided and non-empty. |
Sample Property Values
Windows device:
id: 4C4C4544-0057-4C10-8057-C8C04F573934@contoso.okta.com
name: PC01
display_name: PC01
okta_domain: contoso.okta.com
okta_id: guoxrzqh8jBxYxEeJ697
created: 2025-11-25T11:01:53+00:00
last_updated: 2026-02-17T08:55:45+00:00
status: ACTIVE
resource_type: UDDevice
platform: WINDOWS
manufacturer: Dell Inc.
model: XPS 14 9440
os_version: 10.0.26200.7623
registered: true
secure_hardware_present: true
jail_break: false
udid: 4C4C4544-0057-4C10-8057-C8C04F573934
object_sid: S-1-5-21-1084505731-826279434-3585917670
serial_number: HWLWW94
id: guowq18eyhZaDlkkA697
name: John's iPhone
display_name: John's iPhone
okta_domain: contoso.okta.com
okta_id: guowq18eyhZaDlkkA697
status: ACTIVE
resource_type: UDDevice
platform: IOS
manufacturer: APPLE
model: iPhone17,1
os_version: 18.6.2
registered: true
secure_hardware_present: true
jail_break: false
created: 2025-10-23T17:16:46+00:00
last_updated: 2025-10-23T17:16:47+00:00
