How to Exclude an Application from DSSO Authentication in Okta
Oct 28, 2025
Single Sign-On
Okta Classic Engine
Directories
Overview
Applies To
- Directories
- Desktop Single Sign-On
- Routing Rules
- Okta Classic Engine
Solution
To exclude an application from IWA DSSO or Agentless DSSO authentication, follow the steps or video below:
-
On the Okta Dashboard, navigate to Security > Identity Providers > Routing Rules in the Okta Admin Console.
-
Create a new routing rule by clicking on the Add Rule button.
-
On the AND User is accessing filter, select Any of the following applications and search for the application intended for exclusion.
-
Filter users by selecting a condition for either the User's IP, User's Device Platform, or Users Matches filters.
-
Ensure that the Identity provider used is set to Okta.
-
After saving the rule, activate it by clicking on Activate on the screen that appears.
-
Ensure that this rule is placed higher than the rule for Desktop Single Sign-On.
