<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
System Status
Announcements
Announcements
Search
Search
Select Language
Knowledge Base
Knowledge Articles
Support Videos ↗
Documentation
Product Documentation ↗
Developer Documentation ↗
Product Release Notes ↗
Community
Events & Webinars
Okta Ideas ↗
Resources
Product Hub
Customer Success Hub
Product Release Update
Learning
Okta Learning ↗
Get Support
Open a Case
HomeCommunityForum
0D50Z00008G7Uw2SAFOkta Classic EngineAdministrationAnswered2024-04-30T09:18:25.000Z2017-08-10T19:25:11.000Z2017-08-15T12:26:17.000Z

CloudI.67773 (Customer) asked a question.

Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:19 AM
AD Delegated Authentication
Hello,

 

Does AD Delegated Auth have to be enabled for imports from AD? If we were to turn it off, would the AD mastered accounts in Okta have a password to login to the dashboard? 

 

My hope is that we could import AD users with delegated auth off and that those users will never have a password to be able to login via the login/default URL. The users would then only be able to SSO to applications via SP or IDP links and the authentication is being provided by a seperate IDP that is already set up.

 

  • 2 answers
  • 1.1K views

  • j5v7c (j5v7c)

    Hello thank you for posting this question on our community page.

    If you turn Delegated authentication off you will have this pop up window: 

    0EM2A000000cFn6

    So, the answer is no.
    Expand Post

  • CloudI.67773 (Customer)

    Alex,

     

    Thank you for the response. The point here is that we don't need our users to login to Okta to see the dashboard. Only to be able to SAML SSO into applications via IDP or SP URLs. Would not having an Okta password prevent that? As long as the other IDP is the source of authentication for all SSO connetions. 

     

    Thanks,

    Keith
    Expand Post
This question is closed.
Loading
AD Delegated Authentication