Configure Okta Verify for physical or virtual Windows environments

You can configure Okta Verify for physical or virtual Windows environments by using the AuthenticatorOperationMode option when you deploy the app. To change the authenticator operation mode after deployment, uninstall Okta Verify and reinstall it with other configuration options. For configuration options, see Okta Verify configurations for Windows devices.

Physical Windows environments

When you deploy Okta Verify to physical machines such as desktops or laptops, no configurations are required. The AuthenticatorOperationMode defaults to Normal, which is the appropriate value for physical environments.

Virtual Windows environments

Starting with version 4.9.0, Okta Verify supports deployment on virtual machines for the following Virtual Desktop Infrastructure (VDI) providers:

  • Citrix

  • Windows 365

  • AWS WorkSpace

What value to use with AuthenticatorOperationMode depends on what type of virtual environment you deploy Okta Verify to:

  • In static virtual environments, each time the user signs in, the same hardware is used to host their sessions. Use VirtualDesktopStatic.

  • In layered virtual environments, the hosting hardware may vary by session. Use VirtualDesktopLayered.

The table provides examples of Virtual Desktop Infrastructure (VDI) providers by type.

VDI provider

Virtual environment type

AuthenticatorOperationMode value

Windows 365






AWS Workspaces



Physical machine (laptop) that is accessed by Remote Desktop Protocol



Related topics

Okta Verify configurations for Windows devices

Configure the user verification type for Okta Verify for Windows