ScottV.99083 (Customer) asked a question.
Proxy AD/LDAP auth from applications to introduce Okta MFA
We are currently using both Dou and Okta for various applications to add MFA to their login process. Okta is great for proxying RADIUS auth requests which we have working for multiple things. We have several applications that do not support RADIUS, but do support LDAP/AD for admin authentication. For those we have a Duo LDAP/AD proxy setup which passes the authentication on to our Active Directory, and also inserts a Duo Push after success AD authentication. My question is, does Okta have something similar so we can move completely away from Duo? I see there is an LDAP agent but all the documentation show it is for syncing an LDAP directory, not for inserting an MFA prompt into an LDAP/AD authentication flow.
Example of what we have now: Application (LDAP Auth)---->Duo LDAP Proxy. Duo converts to AD auth---->Active Directory
You are correct Okta LDAP agent is only for syncing, currently we don't have a solution to provide for this setup, I recommend waiting until OIE will be released, that is the new OKTA authentication mechanism.