MFA for RDP session Skip to main content
https://support.okta.com/help/answers?id=906f0000000i0m9iak&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fanswers
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Ask Search:
Subhomoy-Admin Chakraverty-AdminSubhomoy-Admin Chakraverty-Admin 

MFA for RDP session

In past I had deployed MFA for RDP sessions using the RSA Windows Agent being deployed on the Windows Machine. The user would have to use their RSA PassCode in addition to the Windows Password to logon to the Windows Machine. Is there a way to leverage OKTA MFA in the same fashion ?

Thanks

Subho
Best Answer chosen by Niki (Okta, Inc.) 
Jane GraftonJane Grafton
The Lieberman Software Okta MFA application allows Windows users to use Okta Verify Multi-Factor Authentication when logging into target Windows systems. This means that users will be prompted for an Okta Verify one-time password when they login which they will retrieve from their smartphones to gain access to target Windows systems.
Visit this page for more info: https://liebsoft.com/okta
Email okta@liebsoft.com for a free trial.

All Answers

Lee TschetterLee Tschetter (Okta, Inc.)

Okta has a partner that does what you're looking to do: https://liebsoft.com/partners/technology-integrations/okta-custom-applications/

This is a third-party solution but Liebsoft has done a great job integrating with Okta. 

Jane GraftonJane Grafton
The Lieberman Software Okta MFA application allows Windows users to use Okta Verify Multi-Factor Authentication when logging into target Windows systems. This means that users will be prompted for an Okta Verify one-time password when they login which they will retrieve from their smartphones to gain access to target Windows systems.
Visit this page for more info: https://liebsoft.com/okta
Email okta@liebsoft.com for a free trial.
This was selected as the best answer
Teju ShyamsundarTeju Shyamsundar (Okta, Inc.)
We now have a native Okta Windows Credential Provider solution which supports Okta MFA factors for RDP into Windows Serveres - you can find more detail here https://help.okta.com/en/prod/Content/Topics/Security/proc-mfa-win-creds-rdp.htm 
Oscar Pornprasert - AdministrativeOscar Pornprasert - Administrative
Does the Okta Windows Credential Provider solution support Windows 2016? I'm having trouble getting it installed. I followed the doc per Teju's URL.

When everything is setup and i try to RDP, i am presented with a popup error saying "multi factor authentication failed".

Any ideas?
Steven PetersenSteven Petersen
I'm also getting the multifactor authentication failed popup on Server 2016. It eventually allows the connection after a few minutes if the user/pass is correct.
Wes LazaraWes Lazara
Can we get an answer on win2016 compatibility?  This is useless for us without 2016 being supported.  Thanks!
Nigel WhiteNigel White
I see there is the following page  (https://support.okta.com/help/Documentation/Knowledge_Article/New_Feature_Release_Video_Series/Help-Secure-Access-to-Your-Servers-with-Okta-MFA-for-RDP)describing "Okta Windows Credential Provider, which enables MFA for RDP connections" which does not mention Windows Server 2016
and also this page (https://help.okta.com/en/prod/Content/Topics/Security/proc-mfa-win-creds-rdp.htm) describing the Early Access release which does support Windows Server 2016.
Can you clarify the current state of Okta Windows Credential Provider and the likely date for the release of a production version that supports Windows Server 2016

​Thanks