TLS 1.2 on AD Agent

Select Language

0D50Z00008C3jTjSAJOkta Classic EngineAdministrationAnswered2024-04-30T09:18:25.000Z2018-03-13T21:14:49.000Z2018-03-15T20:16:41.000Z

1yl1w (1yl1w) asked a question.

TLS 1.2 on AD Agent

Hi,

Is TLS 1.2 required to be enabled on the AD Agent side? or only required to be enabled on the IWA Server?

OKTA is marking the IWA server as Offline since we enabled HTTPS.

Hopeful for your response.

bogdan.bangu1.5083867746981602E12 (Okta, Inc.)
Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:28 AM
If your IWA Web App is installed on a server running Windows Server 2008 R2 SP1 and you want to use SSO IWA over secured connections (HTTPS), you must first enable the TLS 1.2 protocol for incoming (e.g. IIS) connections. This is necessary because the AD agent, which tries to use TLS 1.2 whenever possible, may lose connectivity with IWA Web Apps installed on Windows Server 2008 R2 SP1 servers that are not enabled for TLS 1.2 incoming connections. Windows Server 2008 R2 SP1 supports TLS 1.2 protocol outgoing connections by default. However, support for incoming connections is disabled by default. Okta strongly recommends enabling this setting.
Expand Post
j5v7c (j5v7c)
Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:29 AM
Hello,

Thanks for posting your inquiry in Okta Community Portal.

If you receive a great answer to your question(s), please help readers find it by marking it the best answer. Hover over the answer and click "Best Answer."

Thank you,

Dylann Fezeu
Okta Help Center Team
Expand Post

This question is closed.