Skip to main content

Disable Delegated Authentication

Delegated Authentication allows Okta to use Active Directory as the authentication source for AD-imported users, meaning users authenticate against AD rather than Okta directly. ZeroTek recommends disabling this so that Okta handles authentication β€” giving you full control over authentication policies, MFA enforcement, and user experience regardless of the underlying directory.

ROLE REQUIRED

ZeroTek Administrator

ZeroTek Technician

If you are completing this procedure in sequence as part of the Okta-AD Integration, you are already logged into Okta as an Okta Super Administrator.

IMPORTANT

Most MSPs will not have imported any AD users at this point in the integration process. If you have already imported AD users, email ZeroTek Support (support@zerotek.com) or further guidance before proceeding.

BEFORE YOU BEGIN

As part of the Okta-AD Integration guide, this procedure assumes you have just configured basic settings and the user profile.

Steps

  1. In Okta, navigate to Directory β†’ Directory Integrations, then click Active Directory.

  2. On the Provisioning tab, under Settings, click Integration.

  3. Clear the Enable delegated authentication to Active Directory checkbox and click Save.

  4. Click Disable AD Authentication (assuming you have not yet imported any AD users).

Did this answer your question?