FredyS.06528 (Customer) asked a question.
Hi,
I am doing some POC for okta right now.
We try to setup okta with delegate authentication to Active Directory.
Currently, our UserPrincipalName is different from main domain.
We use Alternate UPN Suffix.
So my AD Domain is ad.example.org, and our UPN suffix domain is example.org.
Set Okta Username Format to UserPrincipalName.
Trying to login with user@ad.example.org is success.
But when we are try to login with user@example.org, the authentication always failed.
From what i have seen in okta log, it said :
Authenticate user with AD agent
failure : Authentication failed: bad username or passwordEven when we are sure the username and password is correct.
Did i miss something when configuring the okta ?
For more information, our active directory is in Windows Server 2016.
Thank you.
Hi Fredy,
From the looks of it Okta is still seeing user@ad.example.org as the UPN.
I recommend opening a support ticket so an engineer can have a look at your configuration and correct eventual setup errors.
Alex