
f91xw (f91xw) asked a question.
Hello Okta gurus,
When I tried "sft rdp" to a remote Windows host the authentication seemed to go through fine. But then I got the below error message:
"rpc error: code = Unavailable desc = connection error: desc = "transport: authentication handshake failed: read tcp x.x.x.x:51915->x.x.x.x:4421: wsarecv: An existing connection was forcibly closed by the remote host.""
Please note that regular RDP works fine.
Any insight is appreciated. Many thanks in advance!
Luan

Hi, @f91xw (f91xw)
Thank you for posting on our Community page!
Here is a useful response to your use case:
https://devforum.okta.com/t/an-existing-connection-was-forcibly-closed-by-the-remote-host/13359
Thank you for reaching out to our Community and have a great day!
_____________________________________________________________________________
Community members help others by clicking Like or Select as Best on responses. Try it today.
_____________________________________________________________________________
Okta Identity Engine (OIE) Ask Me Anything: Get answers from product experts by clicking here.
@f91xw (f91xw) This error is mostly due to On-Demand User TTL is enabled in the ASA project. When enabled, the server must be accessible on port 4421.
There are two ways you can mitigate this issue;
Community members help others by clicking Like or Select as Best on responses.
Thank you @b5n6c (b5n6c) for taking your time to respond to my question! Yes, all our Projects have On-Demand TTL disabled by default.