SecureCRT requires specific proxy command configurations to function correctly with Okta Advanced Server Access (ASA). Configure the global firewall settings in SecureCRT to use the proxy command type to establish a successful SSH connection.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Okta Advanced Server Access (ASA)
• SecureCRT (Windows)
• SSH Client

How is SecureCRT configured on Windows to connect with Okta Advanced Server Access?

Configure the global firewall settings in SecureCRT to use a proxy command and create a new session to connect to the server.

SecureCRT on Windows:

1. Open SecureCRT.
2. Navigate to Options > Global Options > Firewall > Add.
3. Add a new firewall, and name it as desired. The type should be Proxy Command, and the Proxy command's value should be sft.exe proxycommand %h.
4. Create a new session through the New Session Wizard.
5. For the session, use the SSH2 protocol, hostname as the actual server name in the ASA, the firewall created above, and any random username.
6. Double-click on the session to connect.

NOTE: Proxy Command type must be set for SecureCRT to work with Okta ASA. This option is not available on Mac versions of SecureCRT.

Related References

• SSH Setup