Capture a Fiddler Trace From Apple iOS Devices for Okta Customer Support

Okta troubleshooting often requires capturing HTTPS traffic from an Apple iOS device. A web debugging proxy tool captures and decrypts this web traffic from the iOS device. These instructions use Fiddler Classic as an example, but ensure the selected tool aligns with the organization's guidelines.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Apple iOS
• Troubleshooting HTTPS traffic
• Web Debugging Proxy Tools

How is Fiddler Classic configured on a Windows workstation?

Download, install, and configure Fiddler Classic on a Windows workstation to allow remote connections and decrypt HTTPS traffic.

1. Download Fiddler Classic (Windows only).
2. Install Fiddler Classic on a Windows workstation.
3. Open Fiddler Classic, navigate to Tools > Options > Connections, and select the Allow remote computers to connect checkbox.
4. Restart Fiddler Classic for the changes to take effect.

The following images display the Tools > Options menu and the Connections tab with the remote connection setting enabled.

5. Navigate to http://<workstation_ip_address>:8888/ to verify that the workstation can reach Fiddler Classic. The appearance of the Fiddler Echo Service webpage confirms communication between the client and Fiddler.
6. Navigate to Tools > Options > HTTPS and select Decrypt HTTPS traffic > ... from all processes.
7. Accept the prompts to Trust and Install the Fiddler Root Certificate to decrypt HTTPS traffic.
8. Restart Fiddler Classic.

The following images display the Tools > Options menu and the HTTPS tab with the decryption setting enabled.

NOTE: The workstation and the iOS device must reside on the same network and communicate with each other.

How is the Apple iOS device proxy configured?

Configure the proxy settings on the iOS device to point to the workstation running the web debugging proxy tool.

1. Tap Settings on the home screen.
2. Tap Wi-Fi and select the i icon next to the Wi-Fi name to configure the proxy settings.
3. In the HTTP PROXY section, tap Configure Proxy > Manual.
4. Enter the IP address of the workstation running Fiddler Classic in the Server field.
5. Enter the listening port (8888) in the Port field.
6. Leave the Authentication slider set to Off.

The following image displays the manual proxy configuration screen on an iOS device.

How is HTTPS traffic decrypted from an Apple iOS device?

Download and install the root certificate on the iOS device, enable full trust for the certificate, and reproduce the issue to capture the decrypted traffic.

1. Navigate to http://<workstation_ip_address>:8888/FiddlerRoot.cer to download the FiddlerRoot certificate to the iOS device.
2. Open the FiddlerRoot.cer file and install it.
3. Navigate to Settings > About > Certificate Trust Settings after installing the certificate.
4. Enable the toggle for DO_NOT_TRUST_FiddlerRoot under the ENABLE FULL TRUST FOR ROOT CERTIFICATES section.
5. Reproduce the issue to capture the trace.