Configure a system proxy account

This topic describes how to configure a system-level proxy.

Configure a system proxy using the psexec utility

Use this method to configure a system proxy account by starting Internet Explorer under the system account. This method sets the proxy settings for the current account, not all users.

  1. Download PsTools from Microsoft.
  2. Sign in as an administrator, open a command prompt, and run this command:
    PSExec to run internet explorer as System account
    psexec -i -s "c:\program files\Internet Explorer\iexplore.exe"
  3. Click Tools (gear icon)Internet options.
    You can also run the Control Panel as an administrator using this command:

    Control panel as administrator

    runas /user:{ComputerName}\Administrator "Control.exe"
    Replace {ComputerName} with the name of the local computer, and then select Internet options.
  4. Select the Connections tab.
  5. Click LAN Settings.
  6. In the Proxy server section, complete the following options:
    1. Enable Use proxy server for your LAN.
    2. Enter the Address and Port for the proxy server.
    3. Click OK.
  7. Click OK.
  8. Quit Internet Explorer.
  9. Go to your Okta org URL and verify that the sign-in page and the Sign-In Widget render correctly.

Configure a system proxy using group policies

Use this method to configure a system proxy account by editing Microsoft Windows group policies and Internet Explorer settings. This method sets the proxy settings for all users, not just the current account.

  1. Sign in to your Microsoft Windows system as an administrator.
  2. In the search field, enter gpedit.msc, select the Edit group policy app, and press Enter.
  3. Enable the following policies:
    1. Computer ConfigurationAdministrative TemplatesWindows ComponentsInternet ExplorerMake proxy settings per-machine
    2. Computer ConfigurationPoliciesAdministrative TemplatesSystemGroup PolicyConfigure user Group Policy loopback processing mode

      The policy paths shown here might be slightly different from what you see on your system, depending on which version of Microsoft Windows Server you're using.

  4. Open Internet Explorer using the Run as Administrator option.
  5. Go to SettingsInternet Options.
  6. Click the Connections tab.
  7. Click Lan Settings.
  8. Ensure that the Automatically Detect Settings option isn't checked.
  9. Configure your proxy settings.

System response after installation

After configuring a proxy, the system responds as follows:

  • If the proxy is running, users can access the Okta widget for multifactor authentication and sign-in.
  • If the proxy isn't running, users receive the message Multifactor Authentication Failed, and the System Log shows a connectFailure error.