Deploy Okta Verify to Windows devices

You can deploy Okta Verify to Windows endpoints by either running a command or using a Mobile Device Management (MDM) solution.

Users can also install Okta Verify app on their devices. See installation instructions for users at Get started with Okta Verify on Windows devices.

Before you begin

End of Support

Effective March 31, 2026, the 32-bit version of the Okta Verify app for Windows transitions to End of Support.

See End of Support for 32-bit Okta Verify on Windows.

When you deploy Okta Verify to Windows devices, users might receive notifications or prompts:

  • If you use your MDM software or Microsoft Intune to deploy Okta Verify, then users don't receive the End User License Agreement (EULA) or Crash Reporting notices. Users must uninstall Okta Verify and reinstall it. The notices appear during reinstallation.

  • If you use Microsoft Intune to deploy Okta Verify, users receive the User Account Control (UAC) consent and credential prompts. However, if you use MDM software, users don't receive UAC prompts.

Start this task

Install Okta Verify using the command line

Launch the Okta Verify installer by running the following command:

Copy 
OktaVerifySetup-x.x.x.x-yyyyyyy.exe <option1Name>=<option1Value> <option2Name>=<option2Value>...

This allows you to pass configuration options and values to enable Okta Verify features. See Okta Verify configurations for Windows devices.

Before you deploy the app with your MDM solution, install Okta Verify locally with specific options and values to validate your configuration.

Deploy Okta Verify with Microsoft Intune

To run the Okta Verify installer in quiet mode, use /q for version 4.0.2 or later. For earlier versions, use /q2.

Use Microsoft Intune to deploy Okta Verify as a Win32 app and not as a line-of-business (LOB) app.

  1. Prepare Okta Verify for upload.

    1. In the Okta Admin Console, go to SettingsDownloads and download Okta Verify for Windows (.exe).

    2. Convert Okta Verify into .intunewin format. See Prepare Win32 app content for upload.

  2. Add, assign, and monitor the Okta Verify deployment. See Add, assign, and monitor a Win32 app in Microsoft Intune.

    1. Go to the Microsoft Intune admin center.

    2. Go to AppsAll appsAdd.

    3. On the Select app type pane, under the Other app types, select Windows app (Win32).

    4. Click Select.

    5. On the Add app pane, click Select app package file.

    6. Click the browse button and select the Okta Verify installation file with the .intunewin extension. For example, OktaVerifySetupx.x.x.x-yyyyyyy.intunewin.

    7. Click OK.

    8. On the App information page, add the details for your app.

    9. On the Program page, configure the app installation and removal commands for the app:

      • Install command: Enter OktaVerifySetup-x.x.x.x-yyyyyyy.exe /q OrgUrl=https://customerorg.okta.com, with your org URL. There are other possible configurations. See Okta Verify configurations for Windows devices.

      • Uninstall command: Enter OktaVerifySetup-x.x.x.x-yyyyyyy.exe /uninstall /q

      • Install behavior: Use the default setting System.

      • Device restart behavior:

    10. Click Next.

    11. On the Requirements page, specify the requirements that devices must meet before the app is installed and click Next:

      • Operating system architecture: Select the architectures needed to install the app.

      • Minimum operating system: Select Windows 10 1709.

    12. On the Detection rules page, configure the rules to detect the presence of the app and click Next. You can choose to add multiple rules:

      • Rules format: Select Manually configure detection rule.

        Click Add and enter this information on the Detection rule page and click OK.

      • Path: C:\Program Files\Okta\Okta Verify

      • File or folder: OktaVerify.exe

      • Detection method: Select File or folder exists.

      • Associated with a 32-bit app on 64-bit clients: Keep the default value No.

    13. On the Dependencies page, keep the default values and click Next.

    14. Skip the Supersedence (preview) page. Click Next.

    15. On the Review + create page, review your input. Confirm that you configured the app information correctly.

    16. Click Create to add the app to Microsoft Intune.

Deploy Okta Verify with MDM software

Installation occurs at the system level. User-based installation isn't supported.

  1. Copy the file Okta Verify Setup file to your MDM server.

  2. In the Configuration Manager console, go to Software LibraryApplication ManagementApplications.

  3. On the Home tab, in the Create group, select Create Application.

  4. On the General page of the Create Application Wizard, select Automatically detect information about this application from installation files. Specify the following information:

    • Type: Select Windows Installer (*.exe).

    • Location: Browse to the Okta Verify setup file.

  5. Click Next.

  6. Follow the on-screen prompts.

  7. On the General information page, enter the app details so that you can sort and find it in the Configuration Manager console:

    • Name: Enter a name.

    • Installation program: Specify the installation program, using one of the following flag options:

      • Don't specify installer flags, for example, OktaVerifySetup-x.x.x.x-yyyyyyy.exe /q

      • Specify installer flags, for example, OktaVerifySetup-x.x.x.x-yyyyyyy.exe -q OrgUrl=https://customerorg.okta.com.

        A more general example is OktaVerifySetup-x.x.x.x-yyyyyyy.exe -q [<Flag_1>=<Value_1>] [<Flag_2>=<Value_2>] [...]. In this example, the square brackets ("[" and "]") indicate optional parameters.

        For flag and value options, see Okta Verify configurations for Windows devices.

  8. Click Next.

  9. On the Summary page, confirm the settings and complete the wizard.

  10. In the center pane of the Applications list, right-click the app and select Deploy.

  11. Follow the prompts in the Deploy Wizard.

Configure Okta Verify to work in a proxy-enabled environment

When you deploy Okta Verify in a proxy-enabled environment, an extra configuration step is required to allow automated updates.

You can configure proxy settings during installation using either a ProxyURL or a ProxyPacLocation argument, depending on your environment.

For a proxy server, use OktaVerifySetup-x.x.x.x-yyyyyyy.exe ProxyURL=https://proxy.example.com:3888

For proxy auto configuration, use OktaVerifySetup-x.x.x.x-yyyyyyy.exe ProxyPacLocation=<pac-file-location>.

Related topics

Automatic Okta Verify updates on Windows

Configure Okta Verify for physical or virtual Windows environments

Configure the user verification type for Okta Verify for Windows