
saoq5 (saoq5) asked a question.
We are new to the Okta MFA scene, and we've come across an issue that is brand new to us and we're trying to determine the root cause or, at the very least, rule out Okta as the source. Here's the situation:
On several occasions, some of our laptops have been unable to obtain an internet connection through WiFi (on several occasions) or Ethernet (on one occasion). In the most recent incident, a laptop was unable to obtain an internet connection from either the WiFi (Intel Dual-Band Wireless AC-8265) or Ethernet (Intel I219-LM) adapters in order to login. Due to Okta's presence, the user was unable to login to Windows using cached credentials, making the laptop functionally useless. When he attempted to connect to WiFi, the laptop indicated that it was connected to the WiFi network, but there was no internet. When he plugged into the network, it recognized the cable but no traffic was passing through. Rebooting the computer, as well as shutting it down and letting it sit overnight before turning it back on, did not resolve the problem. In every case, attempting to login results in a "Multi Factor Authentication" error and then it takes him back to the login screen.
The only resolution was to boot Windows 10 to Safe Mode with Networking, bypassing Okta MFA, let the network adapters connect to the network, and then reboot back to normal operations. It has worked fine since then.
With that as the situation, my question for the Okta MFA community is this: Are there situations or known issues where Okta Windows Credentials Provider will block, restrict, or otherwise interfere with network traffic on one or multiple network adapters? This has happened on multiple computers in the few months we have had Okta, and it's not a problem we recall having before that.
Thanks in advance.

I'm not aware of any issues where Okta might specifically block tx/rx network traffic, but if you're using Desktop SSO there are network conditions (e.g., a laptop in a blocked zone, or that can't reach the KDC) that might prevent authentication.