This article reviews Okta Verify support for Virtual Machines and Virtual Desktop Infrastructure (VDI). VDI refers to both the backend infrastructure and the virtual desktops delivered to users. It enables users to access a desktop environment hosted on a centralized server. There are three main types of VDI deployments:
- Persistent VDIs (Static): User's Virtual Machine (VM) state and data are saved between sessions. Users typically connect to the same VM each time.
- Non-persistent VDIs: Virtual machines are reset after each session, and user data is generally not saved locally. Users often connect to a different virtual machine from a pool.
- Layered VDIs (Roaming): A hybrid approach. Users connect to non-persistent virtual machines, but a profile service syncs their data between sessions. Users might connect to different virtual machines, but their data persists. This roaming nature makes layered VDIs complex to support.
- Okta Identity Engine (OIE)
- Okta Verify (OV)
- Virtual Desktop Infrastructure (VDI)
- Virtual Machines (VM)
Starting in Okta Verify for Windows v4.9.0, Okta Verify supports deployment of both Static and Layered VDIs with providers such as:
- VMware Horizon
- Citrix DaaS
- Windows 365 / Azure Virtual Desktop (AVD)
- AWS Amazon WorkSpaces
NOTE:
- This is not a comprehensive list of vendors, but an example of vendors that provide VDI Solutions - Okta's goal is to support any solution that provides VDIs for Windows Operating Systems**
- Due to the nature of non-persistent VDIs, Okta is not able to provide a stable and easy way for admins or users to consistently and seamlessly leverage Okta Verify. If Okta Verify is required for non-persistent VDIs, admins should update VDI solutions to use a Layered VDI approach; this way, the app and user data may persist and be used across sessions.
To configure Okta Verify for use in Static and Layered VDIs, Okta administrators must configure the AuthenticatorOperationMode option when deploying Okta Verify to the endpoints. For more information on configuring Okta Verify for Static and Layered VDI use, see the article:
**NOTE: Okta Verify in Virtual Environments is fully supported for Windows Operating Systems only. Okta is committed to bringing Okta Verify where our customers need it. If support is required for Okta Verify for other operating systems, please use Okta Ideas platform to request or upvote the Idea of focusing development efforts on other virtualized operating systems.
Related References
- Configuring Windows Okta Verify in Virtual Desktop Infrastructures
- Okta Verify Configurations for Windows devices
- Microsoft Key Storage and Retrieval
- FastPass Browser Support
