When you are trying to federate (via WS-FED) Office 365 with Okta:

Solution: You can choose between SAML 2.0 or OIDC for the current integration

Reveal Solution Hide Solution

The Okta On-Prem MFA Agent acts as a Radius client and communicates with the RADIUS enabled On-Prem server, including RSA Authentication manager for RSA SecurIDs. This basically allows your organization to leverage Second Factor from a variety of On-Premises multifactor authentication tools.

Solution: The statement is true

Reveal Solution Hide Solution

There might be specific AD attributes, which – apart from others – do not appear in the Okta user profile. Can those extra attributes be mapped and provisioned towards an app?

Solution: No, it is not possible as Okta queries the whole AD schema and retrieves everything that it’s able to

Reveal Solution Hide Solution

Speaking of Okta Template App and Okta Pluin Template App, which of the following RegEx can you create for an allow list of URLS so that both endpoints for /login or /change_password are accepted under example.com domain?

Solution: https://example.com/(login|change_password)

Reveal Solution Hide Solution

When a user signs out of Okta, if they are using IWA, they’ll be redirected to the Sign In page and without inputting credentials they’ll be signed back in

Solution: Statement is true

Reveal Solution Hide Solution

With Okta Retention Policy, App generated data and reporting based on log data older than how many months is automatically removed (not considering the Backup Data)?

Solution: This data is never removed, as per GDPR

Reveal Solution Hide Solution

Okta AD Agents can be successfully and completely configured by:

Solution: Read-only administrators

Reveal Solution Hide Solution

When a user signs out of Okta, if they are using IWA, they’ll be redirected to the Sign In page and without inputting credentials they’ll be signed back in

Solution: Statement is false, as this would represent a security concern

Reveal Solution Hide Solution

On a Windows machine, which is the right behavior if you try to sign into your Okta org and agentless DSSO is properly configured for it?

Solution: You will be automatically redirected to your Load-Balancing Application, if you have one configured, enter credentials for it and then redirected back to Okta org

Reveal Solution Hide Solution

The Okta On-Prem MFA Agent acts as a Radius client and communicates with the RADIUS enabled On-Prem server, including RSA Authentication manager for RSA SecurIDs. This basically allows your organization to leverage Second Factor from a variety of On-Premises multifactor authentication tools.

Solution: The statement is partically true – as it has nothing to do with RSA

Reveal Solution Hide Solution