Install the Okta IWA Web agent

The Okta Administrative Account used during Okta IWA Agent installation must have Super admin permissions.

When you install the Okta IWA agent the IP address of the client is added to the LegacyIPZone. See Create a network zone for IWA sign-ins.

1. In the Admin Console, go to SettingsDownloads.
2. In the SSO IWA Agents area, click Download Latest.
3. Browse to the location where you downloaded the installation file and double-click OktaSsoIwa-x.x.x .
4. Click Next.
5. In the Web Application Pool Identity dialog box, select Create or use the OktaService account, then click Next.
6. Optional. When prompted, specify a proxy server for your IWA Web agent.
7. On the Register Okta Desktop Single Sign-On screen, select an environment (Production, Preview, or Custom), enter your Okta customer subdomain name, and then click Next.
8. On the Okta Sign In page, enter your Super admin username and password, and then click Sign In.
9. To grant permission to access the Okta API, click Allow Access.
10. When the message Installation completed appears, click Finish.
11. In the Admin Console, go to SecurityDelegated Authentication and in the On-Prem Desktop SSO area, confirm the Okta IWA Web agent is connected.

Next steps

Configure Windows browsers for SSO

Configure Mac browsers for SSO