CallumS.26279 (Customer) asked a question.
Good Afternoon,
I have a question regarding the Windows Credential Provider for Okta MFA. After successfully getting the MFA to work for Windows RDP, a thought came to my mind – what happens when the server in question does not have internet access?
As far as I am concerned, the WCP takes control of the winlogon sequence to force users into providing their MFA – which is what we want. However, after further testing, we noticed that if the server is not connected to the internet, the WCP point blank fails on RDP. Which is not good because it basically renders the server inaccessible to users, unless we access the local console. (But that is not always possible, especially with Microsoft Azure)
Are there ways in which to circumvent the WCP, OR provide backup authentication?
Thanks,
Callum
Hi Callum, local authentication can still occur with or without internet access. You can adjust the Okta MFA Agent config file and set the "InternetFailOpenOption" to "true" access will be allowed. Here is an example Okta MFA agent config file.
{
“Url”: “https://orgname.okta.com“,
“ClientId”: “xxxxxxxxxxxxxxxxxxxxx”,
“ClientSecret”: “xxxxx”,
“FilterCredentialProvider”: true,
“InternetFailOpenOption”: true,
“EnforceTimeoutVersionAgnostic”: true,
*“ErrorTimeOutInSeconds”: true,*
“WidgetTimeOutInSeconds”: 30,
*“ErrorTimeOutInSeconds”: 30,*
“RdpOnly”: false
}