Stepwork Authenticates Through
Your Identity Infrastructure

No. Stepwork authenticates through your existing identity provider — Okta, Microsoft Entra ID, Google Workspace, or 1Password — using standard SAML or OIDC flows. Credentials are never stored or transmitted outside of the normal authentication flow.

No. Stepwork completes MFA exactly like a human user — supporting OTP, passkeys, push notifications (Okta Verify, Microsoft Authenticator, Google Prompts), FIDO2 security keys, and SMS. Your MFA policies stay fully intact.

Yes. Stepwork operates within your existing identity provider policies — conditional access, session management, device compliance, and sign-on risk policies all apply normally.

Stepwork supports passkey-based authentication, including FIDO2 security keys. It completes the passkey challenge natively as part of the standard authentication flow.

Stepwork works with any identity provider that uses SAML 2.0 or OIDC, including Okta, Microsoft Entra ID, Google Workspace, OneLogin, and Ping Identity. It also integrates with 1Password for password-based applications.