IWA SSL Certificate Cannot Be Trusted
Last Updated:
Directories
Overview
This article explains the function of the SSL Certificate labeled "Okta SSO IWA Certificate" in the IIS Personal Certificate Store of the IWA Agent Server.
Applies To
- Directories
- Active Directory (AD)
- Integrated Web Authentication (IWA)
- Desktop Single Sign On (DSSO)
- IWA SSO Agent
Cause
Solution
IWA Agent-based Desktop SSO relies on this certificate for basic functionality. The certificate cannot be removed if IWA Desktop SSO is in use. Agentless DSSO needs to be configured to migrate away from IWA Desktop SSO if the certificate must be removed.
