Active Directory integration implementation options

How you implement your Okta Active Directory (AD) integration depends on the size of your organization, your business requirements, and the scope of your deployment. There are two options:

• Proof of Concept (POC) or simple deployment: If you're doing a POC or a simple AD integration, you'll probably want to install the Okta AD agent, import some users, and configure basic settings. You may not need high-availability or disaster-recovery options, or be concerned about the attributes that you import from your AD user profiles.

• Large-scale enterprise deployment: For large enterprise deployments, it's likely that you'll want to do some planning before installing the Okta AD agent and importing user data.

You can adjust your configuration options and make other changes as your implementation evolves. These topics can help you plan your implementation:

• Active Directory integration prerequisites

• Plan for high availability and disaster recovery

• Integration with existing Active Directory forests and domains

These diagrams illustrate the two most common AD integration scenarios.

AD single forest and single domain deployment

AD single forest and multiple domain deployment