Configure the Active Directory Integration

Course 1 of 5 in Integrate with Active Directory

Install the Okta AD agent to integrate Active Directory with Okta.

Cancel Apply

rate limit

Code not recognized.

About this course

Course Snapshot

  • Duration: 15 minutes
  • Format: On-Demand
  • Audience: Administrators

Course Summary 

The Active Directory integration uses the Okta AD agent to communicate between Active Directory and Okta. It lets you integrate Okta with your on-premises Active Directory instance without needing to open ports on the firewall.

What skills does the course cover?

  • Identify the prerequisites for the Active Directory integration.
  • Install the Okta AD agent.
  • Identify attributes on the Active Directory user profile.
  • List the user provisioning options for the Active Directory integration.

Common questions addressed in the course

What are the server and permission prerequisites for installing the Okta AD agent?

The Okta AD agent must be installed on a supported Windows Server in the target AD domain (or a trusted domain) that has outbound HTTPS connectivity to Okta. During installation, you need an AD administrator account to install the service, an Okta Super Admin or Org Admin account to register the agent, and a dedicated AD service account for ongoing agent operations.

How do Organizational Unit (OU) filters work when configuring the Active Directory integration?

During setup, administrators select specific User OUs and Group OUs in the Okta Admin Console to define the scope of the integration. Okta will only import, synchronize, and authenticate users and groups that reside within those selected OUs.

How does delegated authentication work with Active Directory?

When Active Directory authentication is enabled in Okta, Okta delegates credential verification to on-premises Active Directory via the Okta AD agent in real time, allowing users to sign in to Okta using their existing AD username and password without storing AD passwords in Okta.

About this course

Course Snapshot

  • Duration: 15 minutes
  • Format: On-Demand
  • Audience: Administrators

Course Summary 

The Active Directory integration uses the Okta AD agent to communicate between Active Directory and Okta. It lets you integrate Okta with your on-premises Active Directory instance without needing to open ports on the firewall.

What skills does the course cover?

  • Identify the prerequisites for the Active Directory integration.
  • Install the Okta AD agent.
  • Identify attributes on the Active Directory user profile.
  • List the user provisioning options for the Active Directory integration.

Common questions addressed in the course

What are the server and permission prerequisites for installing the Okta AD agent?

The Okta AD agent must be installed on a supported Windows Server in the target AD domain (or a trusted domain) that has outbound HTTPS connectivity to Okta. During installation, you need an AD administrator account to install the service, an Okta Super Admin or Org Admin account to register the agent, and a dedicated AD service account for ongoing agent operations.

How do Organizational Unit (OU) filters work when configuring the Active Directory integration?

During setup, administrators select specific User OUs and Group OUs in the Okta Admin Console to define the scope of the integration. Okta will only import, synchronize, and authenticate users and groups that reside within those selected OUs.

How does delegated authentication work with Active Directory?

When Active Directory authentication is enabled in Okta, Okta delegates credential verification to on-premises Active Directory via the Okta AD agent in real time, allowing users to sign in to Okta using their existing AD username and password without storing AD passwords in Okta.