{"version":"1.0","type":"card","id":"86aef1ec-825d-4d2a-bec0-92f9bbc5b1d0","url":"https://stacklist.com/card/86aef1ec-825d-4d2a-bec0-92f9bbc5b1d0","title":"https://support.okta.com/help/s/question/0D54z00007L6A4UCAV/active-directory-credentials-cached-in-o","source_url":"https://t","note":"Okta vpn has cahcxe ? Yes, both Okta and VPNs have caching, which can be a source of login or session issues. Okta uses caching for things like JWKS keys and can cache browser data, while VPN client software typically caches credentials to allow for faster re-connections. Sometimes these caches need to be cleared to resolve problems. \nOkta caching\nJWKS keys: Okta recommends caching JSON Web Keys (JWKS) in a way that respects the Cache-Control headers to avoid verification failures when keys are rotated. \nBrowser-level: Okta applications often use browser local storage, which is part of a user's browser cache. Clearing this can resolve login issues, as seen in Okta support forum posts. \nSession and token caching: Old tokens can be used if they aren't cleared properly, and a \"cache\" can sometimes be the reason a user stays logged in across tabs. \nGrant caching: Some organizations have seen a delay where a user still appears to have access to a service for a short time even after their access is revoked, which suggests a caching layer is involved. \nVPN caching\nCredential caching: VPN client software, like FortiClient, can cache user credentials and multi-factor authentication (MFA) tokens, which allows for faster reconnection without re-prompting the user for their password or MFA.\nTroubleshooting: If a VPN is not re-prompting for credentials, it's often necessary to clear the client's cache file to force it to re-authenticate fully. \n\n","image":{"url":"https://ucarecdn.com/62c75a4e-3b5f-4abc-a50f-bff0c1227928/-/crop/3997x4000/1001,0/-/preview/","alt":"https://support.okta.com/help/s/question/0D54z00007L6A4UCAV/active-directory-credentials-cached-in-o","width":1200,"height":630},"stack":{"id":"52a58c13-1152-4b15-8ee3-7e1b4d015888","title":"Okta","url":"https://stacklist.com/stack/52a58c13-1152-4b15-8ee3-7e1b4d015888"},"created_at":"2025-10-23T17:46:11.465Z","updated_at":null,"aco":null,"_links":{"self":"/api/public/card/86aef1ec-825d-4d2a-bec0-92f9bbc5b1d0.json","html":"https://stacklist.com/card/86aef1ec-825d-4d2a-bec0-92f9bbc5b1d0","md":"/api/public/card/86aef1ec-825d-4d2a-bec0-92f9bbc5b1d0.md","stack_json":"/api/public/stack/52a58c13-1152-4b15-8ee3-7e1b4d015888.json"}}