This article explains the function of the SSL Certificate labeled "Okta SSO IWA Certificate" in the IIS Personal Certificate Store of the IWA Agent Server.

• Directories
• Active Directory (AD)
• Integrated Web Authentication (IWA)
• Desktop Single Sign On (DSSO)
• IWA SSO Agent

IWA Agent-based Desktop SSO relies on this certificate for basic functionality. The certificate cannot be removed if IWA Desktop SSO is in use. Agentless DSSO needs to be configured to migrate away from IWA Desktop SSO if the certificate must be removed.

Related References

• Configure agentless Desktop Single Sign-on