{"items":[{"featureId":"AKICertSearchEnabled","description":"Search certificates by AKI values. Fallback to issuer DN","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}},{"name":"DeviceFilter","parameters":{"AppVersion":"6.11.0.0"}}],"key":".appconfig.featureflag/AKICertSearchEnabled","label":null,"value":"{\"id\":\"AKICertSearchEnabled\",\"enabled\":true,\"description\":\"Search certificates by AKI values. Fallback to issuer DN\",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"6.11.0.0\"}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-06-23T19:00:27+00:00","isReadOnly":false,"tags":{}},{"featureId":"AccountPickerEnabled","description":"Adds an account selector when a user has multiple accounts for an org with no default set and attempts to use Fastpass authentication.","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}},{"name":"DeviceFilter","parameters":{"AppVersion":"7.2.0"}}],"key":".appconfig.featureflag/AccountPickerEnabled","label":null,"value":"{\"id\":\"AccountPickerEnabled\",\"enabled\":true,\"description\":\"Adds an account selector when a user has multiple accounts for an org with no default set and attempts to use Fastpass authentication.\",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"7.2.0\"}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-10-05T23:25:25+00:00","isReadOnly":false,"tags":{}},{"featureId":"AsyncSignalsEnabled","description":"It allows WOV to enable/disable asynchronous signal collection.","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}},{"name":"DeviceFilter","parameters":{"AppVersion":"4.10.7.0"}}],"key":".appconfig.featureflag/AsyncSignalsEnabled","label":null,"value":"{\"id\":\"AsyncSignalsEnabled\",\"enabled\":true,\"description\":\"It allows WOV to enable/disable asynchronous signal collection.\",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"4.10.7.0\"}}]}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-01-12T16:53:36+00:00","isReadOnly":false,"tags":{}},{"featureId":"BluetoothEnrollmentBootstrapping","description":"Bluetooth enrollment bootstrapping","displayName":null,"isEnabled":true,"clientFilters":[{"name":"DeviceFilter","parameters":{"AppVersion":"4.2.3.0"}}],"key":".appconfig.featureflag/BluetoothEnrollmentBootstrapping","label":null,"value":"{\"id\":\"BluetoothEnrollmentBootstrapping\",\"description\":\"Bluetooth enrollment bootstrapping\",\"enabled\":true,\"conditions\":{\"client_filters\":[{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"4.2.3.0\"}}]}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2024-02-20T00:21:02+00:00","isReadOnly":false,"tags":{}},{"featureId":"CustomUrlEnrollmentEnabled","description":"Enabled same device enrollment","displayName":null,"isEnabled":true,"clientFilters":[{"name":"DeviceFilter","parameters":{"AppVersion":"5.1.0.0"}}],"key":".appconfig.featureflag/CustomUrlEnrollmentEnabled","label":null,"value":"{\"id\":\"CustomUrlEnrollmentEnabled\",\"description\":\"Enabled same device enrollment\",\"enabled\":true,\"conditions\":{\"client_filters\":[{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"5.1.0.0\"}}]}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2024-11-05T20:21:14+00:00","isReadOnly":false,"tags":{}},{"featureId":"EnableAppLaunchRemediation","description":"Enables in-app remediation for the lost db cases","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}},{"name":"DeviceFilter","parameters":{"AppVersion":"6.9.0.0"}}],"key":".appconfig.featureflag/EnableAppLaunchRemediation","label":null,"value":"{\"id\":\"EnableAppLaunchRemediation\",\"enabled\":true,\"description\":\"Enables in-app remediation for the lost db cases\",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"6.9.0.0\"}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-04-20T16:07:05+00:00","isReadOnly":false,"tags":{}},{"featureId":"EnableDeterministicLoopbackCallerCorrelation","description":null,"displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}},{"name":"DeviceFilter","parameters":{"AppVersion":"6.11.2"}}],"key":".appconfig.featureflag/EnableDeterministicLoopbackCallerCorrelation","label":null,"value":"{\"id\":\"EnableDeterministicLoopbackCallerCorrelation\",\"enabled\":true,\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"6.11.2\"}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-07-25T01:03:33+00:00","isReadOnly":false,"tags":{}},{"featureId":"EnableDrAppCertificatePinning","description":"Feature flag that enables ssl pinning testing for drapp org domains. Constrained to WOV version 6.7.0 and above","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}},{"name":"DeviceFilter","parameters":{"AppVersion":"6.7.0"}}],"key":".appconfig.featureflag/EnableDrAppCertificatePinning","label":null,"value":"{\"id\":\"EnableDrAppCertificatePinning\",\"enabled\":true,\"description\":\"Feature flag that enables ssl pinning testing for drapp org domains. Constrained to WOV version 6.7.0 and above\",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"6.7.0\"}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-02-12T00:30:51+00:00","isReadOnly":false,"tags":{}},{"featureId":"EnableInlineUVRemediation","description":"Remediation flow for recovering UV key","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}},{"name":"DeviceFilter","parameters":{"AppVersion":"6.10.0.0"}}],"key":".appconfig.featureflag/EnableInlineUVRemediation","label":null,"value":"{\"id\":\"EnableInlineUVRemediation\",\"enabled\":true,\"description\":\"Remediation flow for recovering UV key\",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"6.10.0.0\"}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-05-11T18:05:50+00:00","isReadOnly":false,"tags":{}},{"featureId":"EnableInterInstanceMessagingTelemetry","description":"Adds telemetry to OV inter-instance IPC (primary <--> secondary instance)","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}},{"name":"DeviceFilter","parameters":{"AppVersion":"7.2.0"}}],"key":".appconfig.featureflag/EnableInterInstanceMessagingTelemetry","label":null,"value":"{\"id\":\"EnableInterInstanceMessagingTelemetry\",\"enabled\":true,\"description\":\"Adds telemetry to OV inter-instance IPC (primary \\u003C--\\u003E secondary instance)\",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"7.2.0\"}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-10-07T20:56:07+00:00","isReadOnly":false,"tags":{}},{"featureId":"EnableLifecycleErrorRemediation","description":"Resolves customer issues around accounts that have had lifecycle errors.","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}},{"name":"DeviceFilter","parameters":{"AppVersion":"6.11.0"}}],"key":".appconfig.featureflag/EnableLifecycleErrorRemediation","label":null,"value":"{\"id\":\"EnableLifecycleErrorRemediation\",\"enabled\":true,\"description\":\"Resolves customer issues around accounts that have had lifecycle errors.\",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"6.11.0\"}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-08-13T22:20:50+00:00","isReadOnly":false,"tags":{}},{"featureId":"EnableMachineAttestationServer","description":"Allows Management Attestation to work in the FastPass flow, even if the certificate was deployed only to Device/Machine store (and not the User store). User store is still attempted first, but if no suitable certificate is found, then the IPC call is made to Okta Authenticator Service","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}},{"name":"DeviceFilter","parameters":{"AppVersion":"7.0.1"}}],"key":".appconfig.featureflag/EnableMachineAttestationServer","label":null,"value":"{\"id\":\"EnableMachineAttestationServer\",\"enabled\":true,\"description\":\"Allows Management Attestation to work in the FastPass flow, even if the certificate was deployed only to Device/Machine store (and not the User store). User store is still attempted first, but if no suitable certificate is found, then the IPC call is made to Okta Authenticator Service\",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"7.0.1\"}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-09-30T22:32:52+00:00","isReadOnly":false,"tags":{}},{"featureId":"EnableManagementAttestationErrorCodes","description":"Prod FF rollout for reporting explicit errors in managmenet attestation signal","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}},{"name":"DeviceFilter","parameters":{"AppVersion":"6.7.0.0"}}],"key":".appconfig.featureflag/EnableManagementAttestationErrorCodes","label":null,"value":"{\"id\":\"EnableManagementAttestationErrorCodes\",\"enabled\":true,\"description\":\"Prod FF rollout for reporting explicit errors in managmenet attestation signal\",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"6.7.0.0\"}}]}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-02-26T20:27:20+00:00","isReadOnly":false,"tags":{}},{"featureId":"EnableNetworkChangeRecovery","description":"Enables connectivity restore logic when network interfaces and network proxies are changed frequently","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}},{"name":"DeviceFilter","parameters":{"AppVersion":"6.9.0.0"}}],"key":".appconfig.featureflag/EnableNetworkChangeRecovery","label":null,"value":"{\"id\":\"EnableNetworkChangeRecovery\",\"enabled\":true,\"description\":\"Enables connectivity restore logic when network interfaces and network proxies are changed frequently\",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"6.9.0.0\"}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-04-20T20:47:54+00:00","isReadOnly":false,"tags":{}},{"featureId":"EnableRemoteConfigTestMode","description":"Test feature flag for V2 framework","displayName":null,"isEnabled":false,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}}],"key":".appconfig.featureflag/EnableRemoteConfigTestMode","label":null,"value":"{\"id\":\"EnableRemoteConfigTestMode\",\"enabled\":false,\"description\":\"Test feature flag for V2 framework\",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-03-05T17:50:41+00:00","isReadOnly":false,"tags":{}},{"featureId":"EnableScreenLockTypeAndDiskEncryptionTypeErrorCodes","description":"Report error codes for diskEncryptionType and screenLockType signals","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}},{"name":"DeviceFilter","parameters":{"AppVersion":"6.10.0.0"}}],"key":".appconfig.featureflag/EnableScreenLockTypeAndDiskEncryptionTypeErrorCodes","label":null,"value":"{\"id\":\"EnableScreenLockTypeAndDiskEncryptionTypeErrorCodes\",\"enabled\":true,\"description\":\"Report error codes for diskEncryptionType and screenLockType signals\",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"6.10.0.0\"}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-05-22T18:09:17+00:00","isReadOnly":false,"tags":{}},{"featureId":"EnableSentryEventDeduplication","description":"Enables the event deduplication for sentry related exceptions, duplicate errors would be dropped once the threshold of 5 per day / user is reached.","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}},{"name":"DeviceFilter","parameters":{"AppVersion":"6.11.0.0"}}],"key":".appconfig.featureflag/EnableSentryEventDeduplication","label":null,"value":"{\"id\":\"EnableSentryEventDeduplication\",\"enabled\":true,\"description\":\"Enables the event deduplication for sentry related exceptions, duplicate errors would be dropped once the threshold of 5 per day / user is reached.\",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"6.11.0.0\"}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-09-04T17:43:37+00:00","isReadOnly":false,"tags":{}},{"featureId":"EnableSignalErrorDefaults","description":"ITP signals ScreenLockType, DiskEncrypType and TpmPublicKeyHash are designed to have null as the default value when API call fails and the null value is encoded in the JSON payload.","displayName":null,"isEnabled":true,"clientFilters":[{"name":"DeviceFilter","parameters":{"AppVersion":"6.2.1.0"}},{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}}],"key":".appconfig.featureflag/EnableSignalErrorDefaults","label":"windows","value":"{\"id\":\"EnableSignalErrorDefaults\",\"description\":\"ITP signals ScreenLockType, DiskEncrypType and TpmPublicKeyHash are designed to have null as the default value when API call fails and the null value is encoded in the JSON payload.\",\"enabled\":true,\"conditions\":{\"client_filters\":[{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"6.2.1.0\"}},{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2025-09-18T16:22:46+00:00","isReadOnly":false,"tags":{}},{"featureId":"EnableSilentDeviceKeyRestorationOnStartup","description":"Enabled device data recovery job that executes during app startup","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}},{"name":"DeviceFilter","parameters":{"AppVersion":"6.8.0.0"}}],"key":".appconfig.featureflag/EnableSilentDeviceKeyRestorationOnStartup","label":null,"value":"{\"id\":\"EnableSilentDeviceKeyRestorationOnStartup\",\"enabled\":true,\"description\":\"Enabled device data recovery job that executes during app startup\",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"6.8.0.0\"}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-03-16T21:01:08+00:00","isReadOnly":false,"tags":{}},{"featureId":"EnableStrictLoopbackConnectionMapping","description":"Fail close if tcp connection can't be properly matched to http request and the calling PID","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}},{"name":"DeviceFilter","parameters":{"AppVersion":"6.11.2"}}],"key":".appconfig.featureflag/EnableStrictLoopbackConnectionMapping","label":null,"value":"{\"id\":\"EnableStrictLoopbackConnectionMapping\",\"enabled\":true,\"description\":\"Fail close if tcp connection can\\u0027t be properly matched to http request and the calling PID\",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"6.11.2\"}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-08-04T17:57:19+00:00","isReadOnly":false,"tags":{}},{"featureId":"EnableSyncFlowSignalCollectionAnalytics","description":"Enables reporting of more telemetry details about management attestation signal","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}},{"name":"DeviceFilter","parameters":{"AppVersion":"6.9.0.0"}}],"key":".appconfig.featureflag/EnableSyncFlowSignalCollectionAnalytics","label":null,"value":"{\"id\":\"EnableSyncFlowSignalCollectionAnalytics\",\"enabled\":true,\"description\":\"Enables reporting of more telemetry details about management attestation signal\",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"6.9.0.0\"}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-04-20T16:28:36+00:00","isReadOnly":false,"tags":{}},{"featureId":"EnableTelemetryThrottling","description":"Rollout of telemetry throttling in WOV","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}},{"name":"DeviceFilter","parameters":{"AppVersion":"6.8.0.0"}}],"key":".appconfig.featureflag/EnableTelemetryThrottling","label":null,"value":"{\"id\":\"EnableTelemetryThrottling\",\"enabled\":true,\"description\":\"Rollout of telemetry throttling in WOV\",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"6.8.0.0\"}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-03-12T07:35:45+00:00","isReadOnly":false,"tags":{}},{"featureId":"EnableV2Telemetry","description":"Enables new telemetry providers: AppInsights and Sentry","displayName":null,"isEnabled":true,"clientFilters":[{"name":"DeviceFilter","parameters":{"AppVersion":"5.5.0.0"}},{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":50}}}],"key":".appconfig.featureflag/EnableV2Telemetry","label":"windows","value":"{\"id\":\"EnableV2Telemetry\",\"description\":\"Enables new telemetry providers: AppInsights and Sentry\",\"enabled\":true,\"conditions\":{\"client_filters\":[{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"5.5.0.0\"}},{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":50}}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2025-02-18T22:53:00+00:00","isReadOnly":false,"tags":{}},{"featureId":"EnableVolumeEnumerationForDiskEncryptionCheck","description":"Fine tuned disk encryption check(logical drives and drives with different letters)","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}},{"name":"DeviceFilter","parameters":{"AppVersion":"6.10.0.0"}}],"key":".appconfig.featureflag/EnableVolumeEnumerationForDiskEncryptionCheck","label":null,"value":"{\"id\":\"EnableVolumeEnumerationForDiskEncryptionCheck\",\"enabled\":true,\"description\":\"Fine tuned disk encryption check(logical drives and drives with different letters)\",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"6.10.0.0\"}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-05-11T22:45:33+00:00","isReadOnly":false,"tags":{}},{"featureId":"EnableWSCErrorsCollection","description":"Add detail error logging for each Windows Security Center signal especially the value is null. ","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}},{"name":"DeviceFilter","parameters":{"AppVersion":"7.0.0"}}],"key":".appconfig.featureflag/EnableWSCErrorsCollection","label":null,"value":"{\"id\":\"EnableWSCErrorsCollection\",\"enabled\":true,\"description\":\"Add detail error logging for each Windows Security Center signal especially the value is null. \",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"7.0.0\"}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-08-24T17:27:41+00:00","isReadOnly":false,"tags":{}},{"featureId":"NfcPinAuthenticationEnabled","description":"FC + PIN feature enablement for kiosk/shared devices; allows users who are in shared mode to use the NFC+PIN factors for enrolling and authenticating without Fastpass accounts ","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}},{"name":"DeviceFilter","parameters":{"AppVersion":"7.0.0"}}],"key":".appconfig.featureflag/NfcPinAuthenticationEnabled","label":null,"value":"{\"id\":\"NfcPinAuthenticationEnabled\",\"enabled\":true,\"description\":\"FC \\u002B PIN feature enablement for kiosk/shared devices; allows users who are in shared mode to use the NFC\\u002BPIN factors for enrolling and authenticating without Fastpass accounts \",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"7.0.0\"}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-08-25T22:58:31+00:00","isReadOnly":false,"tags":{}},{"featureId":"ODA_ProtectedPasswordRuntimeEnabled","description":"`ODA_ProtectedPasswordRuntimeEnabled` gates runtime protection of plaintext passwords in the Okta Identity Service. When enabled, passwords are held in Windows DPAPI-protected memory while in use and zeroed immediately after use. The flag also gates the one-way plaintext-to-encrypted password database migration (`IdentityServiceSqliteStorageManager.MigratePlainTextPasswordsIfNeeded`). Remediates the ProdSec finding in OKTA-1246123 (password exfiltration via DPAPI entropy readable by local admin).","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":20}}},{"name":"DeviceFilter","parameters":{"AppVersion":"7.0.0.0"}}],"key":".appconfig.featureflag/ODA_ProtectedPasswordRuntimeEnabled","label":null,"value":"{\"id\":\"ODA_ProtectedPasswordRuntimeEnabled\",\"enabled\":true,\"description\":\"\\u0060ODA_ProtectedPasswordRuntimeEnabled\\u0060 gates runtime protection of plaintext passwords in the Okta Identity Service. When enabled, passwords are held in Windows DPAPI-protected memory while in use and zeroed immediately after use. The flag also gates the one-way plaintext-to-encrypted password database migration (\\u0060IdentityServiceSqliteStorageManager.MigratePlainTextPasswordsIfNeeded\\u0060). Remediates the ProdSec finding in OKTA-1246123 (password exfiltration via DPAPI entropy readable by local admin).\",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":20}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"7.0.0.0\"}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-09-09T23:18:18+00:00","isReadOnly":false,"tags":{}},{"featureId":"OsQueryParallelExecutionEnabled","description":"Parallel execution of osquery","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}},{"name":"DeviceFilter","parameters":{"AppVersion":"6.11.0"}}],"key":".appconfig.featureflag/OsQueryParallelExecutionEnabled","label":null,"value":"{\"id\":\"OsQueryParallelExecutionEnabled\",\"enabled\":true,\"description\":\"Parallel execution of osquery\",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"6.11.0\"}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-08-04T17:55:19+00:00","isReadOnly":false,"tags":{}},{"featureId":"OsQuerySignalsPluginEnabled","description":"The OsQuerySignalsPluginEnabled is intended to be used as a kill switch - in the event that OsQuery (Advanced Posture Checks) in WOV must be rolled back after deployment, this flag can be set to false to disable the feature.  If set to false, WOV clients will not be able to execute OsQuery service calls, posture checks including OsQuery custom checks will resolve to false.  This flag takes precedence over the Admin feature flag.","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}},{"name":"DeviceFilter","parameters":{"AppVersion":"6.7.0.0"}}],"key":".appconfig.featureflag/OsQuerySignalsPluginEnabled","label":"windows","value":"{\"id\":\"OsQuerySignalsPluginEnabled\",\"enabled\":true,\"description\":\"The OsQuerySignalsPluginEnabled is intended to be used as a kill switch - in the event that OsQuery (Advanced Posture Checks) in WOV must be rolled back after deployment, this flag can be set to false to disable the feature.  If set to false, WOV clients will not be able to execute OsQuery service calls, posture checks including OsQuery custom checks will resolve to false.  This flag takes precedence over the Admin feature flag.\",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"6.7.0.0\"}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-02-02T20:40:22+00:00","isReadOnly":false,"tags":{}},{"featureId":"RefreshVersion","description":"Default feature flag is used refresh the dynamic value. Don't delete it.","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}}],"key":".appconfig.featureflag/RefreshVersion","label":null,"value":"{\"id\":\"RefreshVersion\",\"enabled\":true,\"description\":\"Default feature flag is used refresh the dynamic value. Don\\u0027t delete it.\",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}}]}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-01-04T01:53:55+00:00","isReadOnly":false,"tags":{}},{"featureId":"SkipChallengeTokenReplayValidation","description":"Controls whether domain validation is performed against registered vanity URLs during enrollment","displayName":null,"isEnabled":true,"clientFilters":[{"name":"Microsoft.Targeting","parameters":{"Audience":{"Users":[],"Groups":[],"DefaultRolloutPercentage":100}}},{"name":"DeviceFilter","parameters":{"AppVersion":"7.0.0"}}],"key":".appconfig.featureflag/SkipChallengeTokenReplayValidation","label":null,"value":"{\"id\":\"SkipChallengeTokenReplayValidation\",\"enabled\":true,\"description\":\"Controls whether domain validation is performed against registered vanity URLs during enrollment\",\"conditions\":{\"client_filters\":[{\"name\":\"Microsoft.Targeting\",\"parameters\":{\"Audience\":{\"Users\":[],\"Groups\":[],\"DefaultRolloutPercentage\":100}}},{\"name\":\"DeviceFilter\",\"parameters\":{\"AppVersion\":\"7.0.0\"}}],\"requirement_type\":\"All\"}}","contentType":"application/vnd.microsoft.appconfig.ff+json;charset=utf-8","eTag":"8527553CBCD10220CA0609BC49FC4D88F8825DDEBBDB6FC3692AF375CBB14BE7","lastModified":"2026-08-24T17:21:50+00:00","isReadOnly":false,"tags":{}}]}