The immediate question
A person may authenticate successfully yet be refused access to a particular app because a device condition is not satisfied. Okta’s help describes device health and organization-set requirements, and Nordstrom’s published identity operations remit includes access and MFA work. No public source used here identifies a universal Nordstrom device-health requirement for every app. The practical question is what exact condition the company’s approved sign-in displayed.
Check the source date
The date on the cited Nordstrom material is part of the evidence. A description in a public report or a current job posting can be accurate when written and still leave out changes made later to menus or policy. Read the page again when you need to act. If a sign-in page, application name or request for a factor differs from your company instructions, pause and check through a known employer channel.
The published evidence
Okta’s device documentation distinguishes a device that has been registered from one that currently meets configured security conditions. Employers may apply policy by app, user group and device context. A message about device requirements is therefore different from a wrong password, and repeatedly entering credentials can distract from the real issue. The worker should consult the on-screen vendor help and company policy before changing settings on a managed device.
Identify the layer
There are three separate checks here: whether the destination belongs to the intended organization, whether the person has a legitimate account, and whether that account has permission for the particular service. Passing the first check does not imply the other two. For a private employee question, an employer can examine its own records; an independent article can only show how to ask the question and which public document supports the general route.
A working example
For example, an employee switches from a managed store device to a personal laptop and finds that a familiar HR application no longer opens. The difference might relate to enrollment or policy, but an independent guide cannot see the access decision. An effective support description names the app, the device type and the exact non-sensitive error wording. It does not include device serial numbers or complete screen recordings of internal pages.
Ask for help without sharing secrets
A helpful support message is specific and restrained: name the service you expected, what general step you reached, the non-sensitive error text and whether this is a new account or device. Do not send a password, verification code, complete account URL, payroll attachment or private message to an outside publisher. Company support can request identity proof using its authorized process. This publication cannot perform that verification.
Limits of an outside guide
It would be irresponsible to suggest disabling browser safeguards, removing a device-management profile or spoofing a company-approved state. Such steps can make the problem worse and may violate employer instructions. Nordstrom’s job posting establishes that enterprise identity is managed professionally; it does not grant this publication authority over device access. Protected error details belong within the authorized workplace service process.
Define a finished task
Consider which result would actually finish the task. A dashboard opening does not mean a time correction was saved; a factor approving does not mean a benefits choice was submitted; a public job listing does not mean an application was received. Look for confirmation in the responsible system, and describe the missing result to the right team. That prevents an access question from becoming an inaccurate claim about HR or recruitment.
An error belongs to a particular app
A requirement can be evaluated when the worker opens a particular protected resource. That is why one app may open while another refuses the same device. The diagnostic question is which application was blocked and what vendor or company message appeared. It would be a mistake to infer a blanket policy for all Nordstrom staff from one generic Okta help page.
Where to go next
Read Okta’s device-health explanation and identify whether the prompt points to a device condition. Ask Nordstrom support what policy applies to your role and app. If the application itself is missing, the assignment guide frames that separate issue; if a newly replaced phone cannot verify, the factor guide is closer. If this does not match an instruction Nordstrom gave you, the current workplace instruction controls the employee task; do not substitute an unrelated search result.
Another decision
Continue with the related resource note and the identity map. They cover different reader tasks, so neither is a substitute for an employer-issued account or a private support response. Keep the cited source and the specific decision together when discussing a changed route with support.