Okta Login via Delegated Authentication fails with ErrorCode 1329 due to Active Directory LogonWorkstations Restrictions
Oct 7, 2025
Directories
Overview
Users are unable to authenticate to Okta using Delegated Authentication with Active Directory, and the following error is displayed in System Log:
Authenticated user with AD agent FAILURE: Login Failed
The error code in the System Log entry is 1329. This Microsoft error code states:
This user isn't allowed to sign in to this computer.
Applies To
- Active Directory (AD)
- Delegated Authentication
Cause
Solution
Add all Okta AD Agent server hostnames to the Log On To list or to the LogonWorkstations attribute in AD.
- Open Active Directory Users and Computers.
- Find the affected user account and open its properties.
- Go to the Account tab, click Log On To, and ensure the Okta AD Agent servers are listed or All Computers is selected.
