About agentless Desktop Single Sign-on failover

There are two failover options:

• Okta automatically fails over to the default sign-on page or the custom error URL if it's available.
• You can use on-premises IWA Desktop Single Sign-On (DSSO) as a backup.

Choosing to fail over to on-premises IWA DSSO, requires you to install and configure the on-premises IWA DSSO. If on-premises IWA DSSO is configured and enabled, it automatically takes over if agentless DSSO stops working. See Install and configure the Okta IWA Web agent for Desktop Single Sign-on.