Device-Bound Session Credentials: Hardware-Bound Cookies, Without the SKU

A few months ago I wrote about Okta&rsquo;s Device-Bound SSO , which welds an Okta session to a hardware key in the Secure Enclave or TPM so a stolen cookie is useless on any other machine. It is a good feature. It is also a vendor-specific one, gated behind a separate SKU and sitting on top of a full Platform SSO deployment. I ended that post wishing this kind of session security shipped as a…