Device posture support

[dsalaza4]

Hi,

I noticed that this CLI does not currently support device posture. Are there any plans on doing so?

Thanks!

[alysonLL]

Just adding my voice here — we’re also running into this issue when using okta-aws-cli with applications that have device assurance policies enabled. The error we’re seeing is:

The application's assurance requirements are not met by the 'subject_token'.

We’ve reviewed the Okta support article and attempted the suggested fixes, but the problem persists.

This is a critical blocker for us. Enforcing device posture is a non-negotiable security requirement, and without support for it in this tool, we’re left without a viable path forward — short of migrating to AWS SSO, which will require a large rearchitecting effort that spans multiple teams.

Would really appreciate any updates, workarounds, or roadmap visibility on this.