Users are unable to authenticate to Okta using Delegated Authentication with Active Directory, and the following error is displayed in System Log:
Authenticate user with AD agent FAILURE: Login Failed
The error code in the System Log entry is 1789. This Microsoft error code states:
The trust relationship between this workstation and the primary domain failed.
- Delegated Authentication
- Active Directory
- AD Agent
ErrorCode 1789 is a direct response from the Domain Controller and indicates that the trust relationship between the workstation (in this case, the AD Agent server) and the primary domain has failed. Please see Microsoft's documentation for more information regarding this error code: System Error Codes.
The most common cause for this error is that the server that hosts the Okta AD Agent has been removed from the domain.
To remediate this issue, join the server that hosts the AD Agent to the Domain.
