check point okta integration password expires

[Daniel_Kavan]

Our okta / check point integration went well until someone's password expired.

In other implementations with Okta users login with the okta login page or SSO page they see and get prompted when their password will expire.  However, when users log into the Check Point SSLVPN portal, users don't see any notification that their passwords will expire soon.  Users want a notification like your okta password will expire in 5 days.  Please go to login.com to change it for example.   Ideally, Check Point would query Okta when users log in and report back, need to change password in 5 days.   RFE! 

We are working on this, just wondering if any one had any ideas or comments.  I will update this post on what we ended up doing.

[PhoneBoy]

Are you using an integration via RADIUS or via SAML?

[Daniel_Kavan]

RADIUS

[PhoneBoy]

Via RADIUS, it's probably an RFE to do that.
The Mobile Access portal in R80.40+ supports SAML authentication, which would show that notification since the authentication page would be from Okta directly.

[Daniel_Kavan]

Yeah...

What would be nice would be to make an API call to OKTA after the user logs in to Okta DayUntilExpire and just show that to the user after they log into the portal.  One way might be to create a web application that makes an API call.  RFE!