Okta cutover: Do existing application sessions drain naturally or require forced re-authentication?
Context A small application currently authenticates via a legacy IdP and is being migrated to Okta using phased routing rules. The goal is zero-downtime cutover without forcing all users to log in again at the moment of switch-over. Unresolved behavior Okta routing rules evaluate only at authentication time. Users who already hold a valid application session
okta