Change the Okta IWA Web agent timeout period

You can configure how long the agent tries to automatically sign users in to apps before redirecting them to the Okta sign-in page. This is useful for extending the app authentication timeout period in environments with slower networks.

  1. On the server that hosts the IWA Web agent, edit the file C:\inetpub\wwwroot\IWA\web.config.
  2. Search for the element <iwaDetection timeout="1000" />. This defines the timeout period in milliseconds. Increase this value to give the agent more time to detect IWA SSO capability before it redirects the user to the Okta sign-in page.
  3. Save and close the file.