Hello Matthew,

Thank you for posting!

The following requirements before installing the Okta Credential Provider for Windows:

• Proxy Configuration: The Okta Credential Provider for Windows does not support a discrete proxy configuration but will obey system level proxy configurations. To understand management of proxies on Windows machines, refer to www.technet.com.
• Remote Desktop feature on your computer "hears" the connection request through a defined listening port (3389 by default), refer to https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/clients/change-listening-port
• The Windows machine used for installation must have an active internet connection with port 443 open.
• The installing account must have administrative rights to install the Okta Windows Credential Provider Agent, Visual C++ Redistributable and .NET 4.0+.
• Inline enrollment is not supported.
• End users must have enrolled their MFA tokens previously, by choosing an MFA option for their account when signing in to Okta the first time or after a reset. End users cannot enroll a token during an RDP sign in. End users with unenrolled tokens receive an authentication failed response from Okta when attempting to sign into an RDP server.