AnthonyP.42827 (Customer) asked a question.
Active Directory - Multiple Instances
Hello,
I have recently started to implement Okta. I have our Sandbox account set up with an Active Directory integration and now serving AWS. With that verified, I would now like to do the same for our Production Okta instance. What I am wondering is if i need to run the AD agent again, or is there a way to simply add the production instance into the already running agent? As well, if I do need to run the AD Agent install again, can this be run on the same Windows server as the sandbox instance is running.
Thanks!
Tony
Hi Tony - Having recently gone through the setup of a test enviro myself, and if I understand the architecture correctly, you'll need a Windows server and agent install (at min) in each of the AD instances you're trying to delegate authentication to a single Okta instance. So if you have a production AD already setup to a test Okta instance, my understanding is that needs to be removed including agent. Then run the agent install again, and point to new production Okta instance. So while you may be able to delegate more than one AD instances, with separate Windows DCs servers in each, to a single Okta instance - the reverse is not necessarily true. I don't believe you can configure delegation of a single domain to multiple Okta instances.