Okta’s SSO or MFA protection doesn’t have to stop at login—the Netskope NG SWG can challenge users for authentication when they perform a high risk action within cloud applications. For example, if a legitimate user is traveling in a risky country or otherwise exhibits unusual behavior, Netskope can suspend the user activity and prompt the user to re-authenticate through Okta before allowing the activity to complete.