Mark Device As Known

The Mark Device As Known action marks the current device as known for the current user, regardless of end user input. Unlike Mark Device As Trusted, known-device grants no privilege — it is a pure recognition/notification signal, never an MFA-bypass gate.

Use this action when you need to know whether a browser has been seen before for a user (for example, to send a "new login from an unrecognized device" notification), independent of whether the user has opted in to skipping MFA on that device.

How It Works

Add the Mark Device As Known action at the point in your flow after the user successfully authenticates. On every subsequent login from that same browser, the knownDevice dynamic key resolves to true, regardless of whether the device has also been marked as trusted.

A device that has been marked as trusted is always considered known as well. Marking a device as known does not mark it as trusted — the two signals are independent, and checking knownDevice never skips MFA on its own.