Install the Okta RADIUS Agent
If you're uninstalling and reinstalling an Okta RADIUS agent, you must decide if you want to remove the old Okta API token. Installing the Okta RADIUS agent does not overwrite existing configuration data in the Okta RADIUS agent folder. To remove the API token, you need to delete the Okta RADIUS agent folder and then deactivate and remove your old Okta RADIUS agent.
When installing the RADIUS Agent you must be logged in as one of the with Read-only Admin, Mobile Admin, App admin, or Super admin roles.
In addition, Okta recommends the use of dedicated service account to authorize RADIUS agents. A dedicated account ensures that the API token used by the RADIUS agent is not tied to the life-cycle of a specific user account which could be deactivated when the user is deactivated. In addition, service accounts used for RADIUS agents must be given appropriate admin permissions.
Please refer to the Administrators permission table (MFA section) for specific permissions required.
In the Admin Console, go to Settings > Downloads > Okta RADIUS Server Agent.
Click the Download button and run the Okta RADIUS installer.
Proceed through the installation wizard to the "Important Information" and "License Information" screens.
Choose the Installation folder and click the Install button.
On the Okta RADIUS Agent Configuration screen, enter your RADIUS Shared Secret key and RADIUS Port number. If you are using the RADIUS application, these elements are not required.
Avoid the use of special characters when entering the shared secret. Certain special characters can cause the installation to fail with Error Code: 3.
On the Okta RADIUS Agent Proxy Configuration screen, you can optionally enter your proxy information. Click the Next button.
On the Register Okta RADIUS Agent screen, enter the following: Choose your org version.
If setting this up to test on your Okta Preview Sandbox org, you'll need to enter the complete URL for your org. For example: https://mycompany.oktapreview.com
- Enter Subdomain – For example, if you access Okta using https://mycompany.okta.com, enter "mycompany", as described below.
Note: If during the agent installation you encounter
Error code 12: Could not establish trust relationship for the SSL/TLS service channel, ensure that you are running the latest version of the agent as older agent versions do not support TLS 1.2.