# synthetic monitoring an application that passes through OKTA (http or browser synthetic monitoring)

**URL:** <https://community.dynatrace.com/t/synthetic-monitoring-an-application-that-passes-through-okta-http-or-browser-synthetic-monitoring/20520>\
**Category:** Synthetic Monitoring\
**Tags:** data-privacy-and-product-security, http-monitor, browser-monitors, synthetic-monitoring\
**Created:** [October 9, 2020, 8:17pm UTC](https://community.dynatrace.com/t/synthetic-monitoring-an-application-that-passes-through-okta-http-or-browser-synthetic-monitoring/20520 "2020-10-09T20:17:08Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![ckumlien](https://avatars.discourse-cdn.com/v4/letter/c/ecd19e/32.png) [@ckumlien](https://community.dynatrace.com/u/ckumlien)\
**Post date:** [October 9, 2020, 8:17pm UTC](https://community.dynatrace.com/t/synthetic-monitoring-an-application-that-passes-through-okta-http-or-browser-synthetic-monitoring/20520/1 "2020-10-09T20:17:08Z")

</div>

Can anyone share your experience with me regarding monitoring synthetic URL’s that sit behind OKTA Authentication? The authentication sends verification code to a phone number and I don’t know how to capture that and place it into the monitor. Has anyone actually made this work?

If it were not a random code, a voicemail on a dedicated number could authenticate. Since it is a random code, that no longer will work.

---

<div class="post-metadata">

**Author:** ![AntonioSousa](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/antoniosousa/32/50_2.png) [@AntonioSousa](https://community.dynatrace.com/u/AntonioSousa)\
**Post date:** [October 10, 2020, 5:50pm UTC](https://community.dynatrace.com/t/synthetic-monitoring-an-application-that-passes-through-okta-http-or-browser-synthetic-monitoring/20520/2 "2020-10-10T17:50:56Z")

</div>

I have been looking into OKTA, but from the HTTP monitor perspetive, and no 2FA. 2FA is always particularly difficult to script…

---

<div class="post-metadata">

**Author:** ![hannahmac](https://avatars.discourse-cdn.com/v4/letter/h/dec6dc/32.png) [@hannahmac](https://community.dynatrace.com/u/hannahmac)\
**Post date:** [October 12, 2020, 9:15am UTC](https://community.dynatrace.com/t/synthetic-monitoring-an-application-that-passes-through-okta-http-or-browser-synthetic-monitoring/20520/3 "2020-10-12T09:15:13Z")

</div>

Is there an API we could use to get the verification code from? If you have the code that generates the ‘random’ code, could we add that to a javaScript event to generate it through the script? Can the code only be sent to sms, could you use an a webmail account that you could check as part of the monitor?  
Alternatively, if you are not specifically testing that 2FA works can you add something into your application that checks for our User Agent string and if it’s included skips the 2FA.

---

<div class="post-metadata">

**Author:** ![skanchalwar2](https://avatars.discourse-cdn.com/v4/letter/s/9e8a1a/32.png) [@skanchalwar2](https://community.dynatrace.com/u/skanchalwar2)\
**Post date:** [August 5, 2021, 2:53pm UTC](https://community.dynatrace.com/t/synthetic-monitoring-an-application-that-passes-through-okta-http-or-browser-synthetic-monitoring/20520/4 "2021-08-05T14:53:47Z")

</div>

If we can bypass 2FA for the dummy user, will Synthetic able to login into Okta and reach the app?

---

<div class="post-metadata">

**Author:** ![AntonioSousa](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/antoniosousa/32/50_2.png) [@AntonioSousa](https://community.dynatrace.com/u/AntonioSousa)\
**Post date:** [August 5, 2021, 3:07pm UTC](https://community.dynatrace.com/t/synthetic-monitoring-an-application-that-passes-through-okta-http-or-browser-synthetic-monitoring/20520/5 "2021-08-05T15:07:31Z")

</div>

I have not tried hard to get this working, as it takes a lot of actions, which has a great impact on DEM consumption. But I would say so to your question.