ConnorsG.65673 (Customer) asked a question.
Windows 10 - SSO - No AD, No Domain
Small business. Approximately 50 users. Users live all over the country and work all over the world. We utilize cloud services exclusively. We have never had an AD, with the closest thing being users in Office 365. I want to implement SSO so users can have one password for all services. Additionally, I'd like to extend this same password do the Windows Desktop. The only tool I have found that seems to work with Windows 10 without an AD is JumpCloud. Can something be done like this with Okta given the situation above? Any thoughts are welcome.
It's possible to have SSO without an AD - the would be Okta mastered users. However, not sure of way to keep the Windows 10 local user PW insync with the Okta PW.
Yeah, that's the part I'm interested in. JumpCloud has a Windows utility that gets installed on very machine, matches the user on the local Desktop with their SSO and lets the user log in with the same password. I was hoping Okta has something similar because I would prefer to use Okta since we are using the SaaS tools for our cloud application.
I could be wrong, as I may be thinking of one of the other solutions I was looking at when we bought okta, but I seem to remember the sales person telling me Okta has a solution that was beta at the time to let you log into windows and mac devices using the okta password. It was an extra add-on, but we decided not to go with it. I would reach out to sales and ask this question.
You might want to speak to one of our sales team about our imminent FastPass feature; I think this will allow desktop SSO through biometrics with no dependency on AD.
Is Okta FastPass a completely different product that would need to be purchased? is this future not available with having all devices joined to Azure AD and the tenant federated with OKTA?
FastPass will be a separate feature you need to purchase, yes. And yes, there are other ways of getting desktop SSO, but this person was asking about how to do it without having any AD.