Install and configure the Okta IWA Web App for Desktop SSO

Okta IWA is a lightweight Internet Information Services (IIS) web appAn abbreviation of application. Essentially, it is a web-based site used to perform any number of specific tasks, and requires authentication from end users by signing in. that enables Desktop SSOAn acronym for single sign-on. In a SSO system, a user logs in once to the system and can access multiple systems without being prompted to sign in for each one. Okta is a cloud-based SSO platform that allows users to enter one name and password to access multiple applications. Users can access all of their web applications, both behind the firewall and in the cloud, with a single sign in. Okta provides a seamless experience across PCs, laptops, tablets, and smartphones. on the Okta service. Desktop SSO allows usersIn Okta literature, we generally refer to "users" as the people who serve as Okta administrators. When we refer to "end users" we are generally referring to the people who the administrators serve. That is, those who use Okta chiclets to access their apps, but have no administrative control. to be automatically authenticated by Okta, and any apps accessed through Okta, whenever they sign into your Windows network. The Okta IWA Web App uses Microsoft's IWA and ASP.NET to authenticate users from specified gateway IPs. 



You must have installed and configured the Okta AD agentA software agent is a lightweight program that runs as a service outside of Okta. It is typically installed behind a firewall and allows Okta to tunnel communication between an on-premises service and Okta's cloud service. Okta employs several agent types: Active Directory, LDAP, RADIUS, RSA, Active Directory Password Sync, and IWA. For example, users can install multiple Active Directory agents to ensure that the integration is robust and highly available across geographic locations. and Delegated Authentication must be on before you can configure IWA Desktop SSO. For details, see Install and configure the Okta Active Directory (AD) agent