User17244030809384614859 (Customer) asked a question.
Hello,
i need a help with activating OKTA AD agent. Activation fails with following error:
The installation log shows error details, can you please help me understand where is the issue?
2024/08/23 10:36:59.730+02:00 Info -- VSAN-AD1(1) -- Agent configuration utility started
2024/08/23 10:36:59.750+02:00 Info -- VSAN-AD1(1) -- Version: 3.18.0-858-3fd1b94
2024/08/23 10:36:59.862+02:00 Info -- VSAN-AD1(1) -- Updated System.Net.ServicePointManager.SecurityProtocol=Tls12
2024/08/23 10:36:59.862+02:00 Info -- VSAN-AD1(1) -- Updated System.Net.ServicePointManager.EnableDnsRoundRobin=True
2024/08/23 10:36:59.873+02:00 Info -- VSAN-AD1(1) -- Verifying connectivity to Okta services at https://trial-6519532.okta.com
2024/08/23 10:36:59.901+02:00 Info -- VSAN-AD1(1) -- Proxy server: not available (direct connection)
2024/08/23 10:36:59.917+02:00 Info -- VSAN-AD1(1) -- GET: https://trial-6519532.okta.com/
2024/08/23 10:36:59.948+02:00 Info -- VSAN-AD1(1) -- GetResponse starting, CurrentConnections:0, ConnectionLimit:2, Timeout:100000, ReadWriteTimeout:300000, KeepAlive:True, ConnectionLeaseTimeout:300000.
2024/08/23 10:37:00.132+02:00 Info -- VSAN-AD1(1) -- Request to trial-6519532.okta.com resolved to 13.248.212.212
2024/08/23 10:37:01.018+02:00 Info -- VSAN-AD1(1) -- X-Okta-Request-Id: a5e0dd2e1fa12b391876af335d209072
2024/08/23 10:37:01.018+02:00 Info -- VSAN-AD1(1) -- Connectivity to Okta services verified
2024/08/23 10:37:01.181+02:00 Info -- VSAN-AD1(1) -- Agent configuration utility started
2024/08/23 10:37:01.197+02:00 Info -- VSAN-AD1(1) -- Version: 3.18.0-858-3fd1b94
2024/08/23 10:37:01.319+02:00 Info -- VSAN-AD1(1) -- Updated System.Net.ServicePointManager.SecurityProtocol=Tls12
2024/08/23 10:37:01.319+02:00 Info -- VSAN-AD1(1) -- Updated System.Net.ServicePointManager.EnableDnsRoundRobin=True
2024/08/23 10:37:01.335+02:00 Info -- VSAN-AD1(1) -- Initializing a new agent registration at https://trial-6519532.okta.com
2024/08/23 10:37:01.397+02:00 Info -- VSAN-AD1(1) -- POST: https://trial-6519532.okta.com/oauth2/v1/device/authorize
2024/08/23 10:37:01.435+02:00 Info -- VSAN-AD1(1) -- Request to trial-6519532.okta.com resolved to 13.248.212.212
2024/08/23 10:37:01.451+02:00 Info -- VSAN-AD1(1) -- GetResponse starting, CurrentConnections:1, ConnectionLimit:2, Timeout:100000, ReadWriteTimeout:300000, KeepAlive:True, ConnectionLeaseTimeout:300000.
2024/08/23 10:37:02.379+02:00 Info -- VSAN-AD1(1) -- X-Okta-Request-Id: 70de8a09b8b9b14d3363b94b87a3eda1
2024/08/23 10:37:02.796+02:00 Info -- VSAN-AD1(1) -- New agent registration initialized
2024/08/23 10:37:02.796+02:00 Info -- VSAN-AD1(1) -- Device code: e49558a9-c869-4029-b64e-fd2e6855df5a
2024/08/23 10:37:02.796+02:00 Info -- VSAN-AD1(1) -- Expires in: 600
2024/08/23 10:37:02.796+02:00 Info -- VSAN-AD1(1) -- Polling interval: 5
2024/08/23 10:37:07.141+02:00 Info -- VSAN-AD1(1) -- Agent configuration utility started
2024/08/23 10:37:07.163+02:00 Info -- VSAN-AD1(1) -- Version: 3.18.0-858-3fd1b94
2024/08/23 10:37:07.279+02:00 Info -- VSAN-AD1(1) -- Updated System.Net.ServicePointManager.SecurityProtocol=Tls12
2024/08/23 10:37:07.279+02:00 Info -- VSAN-AD1(1) -- Updated System.Net.ServicePointManager.EnableDnsRoundRobin=True
2024/08/23 10:37:07.310+02:00 Info -- VSAN-AD1(1) -- Polling for a registration token at https://trial-6519532.okta.com
2024/08/23 10:37:07.310+02:00 Info -- VSAN-AD1(1) -- Device code: e49558a9-c869-4029-b64e-fd2e6855df5a
2024/08/23 10:37:07.376+02:00 Info -- VSAN-AD1(1) -- POST: https://trial-6519532.okta.com/oauth2/v1/token
2024/08/23 10:37:07.414+02:00 Info -- VSAN-AD1(1) -- Request to trial-6519532.okta.com resolved to 13.248.212.212
2024/08/23 10:37:07.430+02:00 Info -- VSAN-AD1(1) -- GetResponse starting, CurrentConnections:1, ConnectionLimit:2, Timeout:100000, ReadWriteTimeout:300000, KeepAlive:True, ConnectionLeaseTimeout:300000.
2024/08/23 10:37:08.279+02:00 Info -- VSAN-AD1(1) -- X-Okta-Request-Id: 4daf6c58a68baf342bc54be197430822
2024/08/23 10:37:08.279+02:00 Info -- VSAN-AD1(1) -- Unexpected response status (400 BadRequest) for request URI https://trial-6519532.okta.com/oauth2/v1/token
2024/08/23 10:37:08.279+02:00 Info -- VSAN-AD1(1) -- Response from server: {"error":"authorization_pending","error_description":"The device authorization is pending. Please try again later."}
2024/08/23 10:37:08.680+02:00 Info -- VSAN-AD1(1) -- The agent authorization is pending
2024/08/23 10:37:13.220+02:00 Info -- VSAN-AD1(1) -- Agent configuration utility started
2024/08/23 10:37:13.236+02:00 Info -- VSAN-AD1(1) -- Version: 3.18.0-858-3fd1b94
2024/08/23 10:37:13.363+02:00 Info -- VSAN-AD1(1) -- Updated System.Net.ServicePointManager.SecurityProtocol=Tls12
2024/08/23 10:37:13.371+02:00 Info -- VSAN-AD1(1) -- Updated System.Net.ServicePointManager.EnableDnsRoundRobin=True
2024/08/23 10:37:13.383+02:00 Info -- VSAN-AD1(1) -- Polling for a registration token at https://trial-6519532.okta.com
2024/08/23 10:37:13.383+02:00 Info -- VSAN-AD1(1) -- Device code: e49558a9-c869-4029-b64e-fd2e6855df5a
2024/08/23 10:37:13.443+02:00 Info -- VSAN-AD1(1) -- POST: https://trial-6519532.okta.com/oauth2/v1/token
2024/08/23 10:37:13.474+02:00 Info -- VSAN-AD1(1) -- Request to trial-6519532.okta.com resolved to 13.248.212.212
2024/08/23 10:37:13.490+02:00 Info -- VSAN-AD1(1) -- GetResponse starting, CurrentConnections:1, ConnectionLimit:2, Timeout:100000, ReadWriteTimeout:300000, KeepAlive:True, ConnectionLeaseTimeout:300000.
2024/08/23 10:37:14.376+02:00 Info -- VSAN-AD1(1) -- X-Okta-Request-Id: 1456ddb5f69b8d244765a03aa94476e04
2024/08/23 10:37:14.376+02:00 Info -- VSAN-AD1(1) -- Unexpected response status (400 BadRequest) for request URI https://trial-6519532.okta.com/oauth2/v1/token
2024/08/23 10:37:14.376+02:00 Info -- VSAN-AD1(1) -- Response from server: {"error":"access_denied","error_description":"User is not assigned to the client application."}
2024/08/23 10:37:14.808+02:00 Error -- VSAN-AD1(1) -- Failed to poll for a registration token: User is not assigned to the client application.
2024/08/23 10:37:14.815+02:00 Info -- VSAN-AD1 at Okta.Api.OktaAPIFactory.PollDeviceAuthorization(String deviceCode)
at Okta.Agent.Installation.AgentCli.ConfigCli.OAuthPoll()
Okta.Api.Authentication.OAuth2Exception received with message User is not assigned to the client application. Source=OktaWebAPI InnerException=Okta.Api.OktaApiException: Unexpected status code 400 BadRequest for URL https://trial-6519532.okta.com/oauth2/v1/token
at Okta.Api.RestClient.OnResponseError(String url, HttpWebRequest request, HttpWebResponse response)
at Okta.Api.RestClient.OnResponseError(HttpWebRequest request, HttpWebResponse resp)
at Okta.Api.RestClient.DoRequest(String method, Uri uri, String requestBody, String contentType, String accept, Encoding encoding)
at Okta.Api.RestClient.FormPost(String accept, Dictionary`2 formParams, UriTemplate template, String[] args)
at Okta.Api.RestClient.FormPost(Dictionary`2 formParams, UriTemplate template, String[] args)
at Okta.Api.OktaAPIFactory.PollDeviceAuthorization(String deviceCode).
Caused by Okta.Api.OktaApiException received with message Unexpected status code 400 BadRequest for URL https://trial-6519532.okta.com/oauth2/v1/token Source=OktaWebAPI InnerException=.
Hi @User17244030809384614859 (Customer) , thank you for contacting Okta Community.
This matter has been previously discussed here. Take a look at the tips and documents shared in that thread.
Regards.
—
Ask Us Anything thru 9/3 Okta’s New MFA Requirement for Admin Console Access
Thank you for your help, I have managed to activate AD agent.
May I please ask you to reset account password on following trial account:
[REDACTED BY MODERATOR]
account:
[REDACTED BY MODERATOR]
Thank you in advance
Milan Jelenic
[REDACTED BY MODERATOR]
Hello support,
I have managed to lock myself out so I can’t post my reply . Is there a way to reset my account password? I have working on following
[REDACTED BY MODERATOR]
And unfortunately in that process locked myself out of the system
Thank you in advance
Milan Jelenic
Hi @User17244030809384614859 (Customer) , please do not post personal information here, as this is a public space. You can email us at community@okta.com with the org's URL and the email address for the Super Admin account.
Thank you.