Disabling Delegated Authentication for Okta LDAP Integrations
Last Updated:
Okta Classic Engine
Directories
Okta Identity Engine
Overview
Delegated authentication allows users to sign in to Okta using credentials from an external directory. Administrators can disable delegated authentication for Lightweight Directory Access Protocol (LDAP) integrations directly from the Okta Admin Console.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Delegated Authentication
- Lightweight Directory Access Protocol (LDAP)
Solution
What are the steps to disable delegated authentication for LDAP integrations?
Navigate to the Security menu in the Admin Console, access the LDAP settings, and clear the Enable delegated authentication to LDAP option.
- In the Okta Admin Console, go to Security > Delegated Authentication.
- Select the LDAP tab.
- In the Delegated Authentication section, select Edit.
- Clear the Enable delegated authentication to LDAP checkbox.
- Select Save.
- At the prompt, select whether to reset all LDAP user passwords. Choosing to reset the passwords sends a password reset notification email to all LDAP users. If the passwords are not reset, those users are unable to log in until the passwords are reset.
