Riverton City is preparing an Okta Identity Engine regional rollout in March 2025. Two authentication policy rules match a user: one broad employee rule and one high-risk country rule. The broad rule is listed first and allows password only. A parallel laptop refresh is underway, but endpoint inventory is managed outside Okta. What explains the result?
