The Okta Windows Credential Provider supports local accounts on a Windows Server, regardless of whether the server is connected to a domain. Administrators can configure the Remote Desktop Protocol (RDP) Multi-Factor Authentication (MFA) application in Okta to authenticate local server accounts by adjusting the application username format.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Okta Windows Credential Provider
• Remote Desktop Protocol (RDP)
• Multi-Factor Authentication (MFA)

How is the Windows Credential Provider configured for non-domain-joined servers?

Configure the Windows Credential Provider for non-domain-joined servers by creating a matching Okta account, assigning the application, and modifying the username format.

1. Install and configure the Windows Credential Provider.
2. Create an account in Okta that matches the local account on the non-domain-joined server (for example, <user@example.com>).
3. Navigate to Directory, select People, and choose Add Person.
4. Fill out the form. If the account lacks a domain suffix, enter the server name to proceed.
5. Navigate to Applications and select the Microsoft RDP (MFA) application.
6. Select the Assignments tab, choose Assign, and select People to assign the Okta account to the application.
7. Select the pencil icon next to the assignment.
   
    
   
   
8. Remove the domain suffix and retain only the local username (for example, <administrator>), then select Save.
   
    

The Windows Credential Provider requires specific configuration for domain-joined servers.

Configure the Windows Credential Provider for domain-joined servers by assigning the application and defining the application username with the hostname prefix.

1. Navigate to Applications and select the Microsoft RDP (MFA) application.
2. Select the Assignments tab, choose Assign, and select People to assign the Okta account to the application.
3. Define the application username as <HOSTNAME\username> (for example, <SERVER01\Administrator>).

NOTE: When setting the Application username format to Okta username prefix, do not use the <HOSTNAME\> prefix for the username. Use the username itself. If the administrator adds the <HOSTNAME\> prefix, Okta generates the following error message:

Multi-Factor Authentication Failed

Related References

• Okta MFA Credential Provider for Windows