Deploy Okta Verify to Windows devices (2024)

You can deploy Okta Verify to users' devices, or users can install the Okta Verify app themselves. If you don't want users to install the Okta Verify app, then you can deploy it to their devices.

If you specify the OrgUrl option when you deploy Okta Verify to Windows devices, updates are automatically installed. Okta Verify checks the server for app updates. When a new version is available, it's automatically downloaded on the device.

If you don't specify the OrgUrl option, then the app is automatically updated only if the user has an Okta Verify account (active enrollment).

If you don't want to deploy Okta Verify, then users can install the app. See installation instructions for users at Get started with Okta Verify on Windows devices.

Before you begin

When you deploy Okta Verify to Windows devices, users might receive notifications or prompts:

  • End User License Agreement (EULA) and Crash Reporting notice:

    If you use your mobile device management (MDM) software or Microsoft Endpoint Manager (MEM) to deploy Okta Verify, then users don't receive the EULA or Crash Reporting notices. Users must uninstall Okta Verify and reinstall it. The notices appear during reinstallation.

  • User Account Control (UAC) prompt

    • If you use MEM software to deploy Okta Verify, users receive the UAC consent and credential prompts.

    • If you use MDM software, users don't receive UAC prompts.

Tasks

  • Deploy Okta Verify using Microsoft Intune
  • Deploy Okta Verify using MEM software
  • Configure Okta Verify to work in a proxy-enabled environment

Deploy Okta Verify using Microsoft Intune

To run the Okta Verify installer in quiet mode, use /q for version 4.0.2 or later. For earlier versions, use /q2.

Use Intune to deploy Okta Verify as a Win32 app and not as a line-of-business (LOB) app.

  1. Prepare Okta Verify for upload.

    1. In the Okta Admin Console, go to Settings > Downloads and download Okta Verify for Windows (.exe).

    2. Convert Okta Verify into the .intunewin format. See Prepare Win32 app content for upload.

  2. Add, assign, and monitor the Okta Verify deployment. See Add, assign, and monitor a Win32 app in Microsoft Intune.

    1. Go to the Microsoft Endpoint Manager admin center.

    2. Go to Apps > All apps > Add.

    3. On the Select app type pane, under the Other app types, select Windows app (Win32).

    4. Click Select.

    5. On the Add app pane, click Select app package file.

    6. Click the browse button and select the Okta Verify installation file with the .intunewin extension. For example, OktaVerifySetupx.x.x.x-yyyyyyy.intunewin.

    7. Click OK.

    8. On the App information page, add the details for your app.

    9. On the Program page, configure the app installation and removal commands for the app:

      • Install command: Enter OktaVerifySetup-x.x.x.x-yyyyyyy.exe /q OrgUrl=https://{org}.org.com. There are other possible configurations. See Managed app configurations for Windows devices.

      • Uninstall command: Enter OktaVerifySetup-x.x.x.x-yyyyyyy.exe /uninstall /q

      • Install behavior: Use the default setting System.

      • Device restart behavior:

    10. Click Next.

    11. On the Requirements page, specify the requirements that devices must meet before the app is installed and click Next:

      • Operating system architecture: Select the architectures needed to install the app.

      • Minimum operating system: Select Windows 10 1709.

    12. On the Detection rules page, configure the rules to detect the presence of the app and click Next. You can choose to add multiple rules:

      • Rules format: Select Manually configure detection rule.

      • Click Add and enter this information on the Detection rule page and click OK:

      • Path: C:\Program Files\Okta\Okta Verify

      • File or folder: OktaVerify.exe

      • Detection method: Select File or folder exists.

      • Associated with a 32-bit app on 64-bit clients: Keep the default value No.

    13. On the Dependencies page, keep the default values and click Next.

    14. Skip the Supersedence (preview) page. Click Next.

    15. On the Review + create page, review your input. Confirm that you configured the app information correctly.

    16. Click Create to add the app to Intune.

Deploy Okta Verify using MEM software

Installation occurs at the system level. User-based installation isn’t supported.

  1. Copy the file Okta Verify Setup file to your MEM server.
  2. In the Configuration Manager console, go to Software Library > Application Management > Applications.
  3. On the Home tab, in the Create group, select Create Application.
  4. On the General page of the Create Application Wizard, select Automatically detect information about this application from installation files. Specify the following information:
    • Type: Select Windows Installer (*.exe).
    • Location: Browse to the Okta Verify Setup file.
  5. Click Next.
  6. Follow the on-screen prompts.
  7. On the General information page, enter application details so that you can sort and find it in the Configuration Manager console:
  • Name: Enter a name.
  • Installation program: Specify the installation program, using one of the following flag options:
    • Don't specify installer flags:

      OktaVerifySetup-x.x.x.x-yyyyyyy.exe /q

    • Specify installer flags. In the following examples, square brackets ("[" and "]") indicate optional parameters. For flag and value options, see Managed app configurations for Windows devices.

      OktaVerifySetup-x.x.x.x-yyyyyyy.exe -q [<Flag_1>=<Value_1>] [<Flag_2>=<Value_2>] [...]

      Example: OktaVerifySetup-x.x.x.x-yyyyyyy.exe -q OrgUrl=https://ORGNAME.oktapreview.com

  • Click Next.
  • On the Summary page, confirm the settings and complete the wizard.
  • In the center pane of the Applications list, right-click the app and select Deploy.
  • Follow the prompts in the Deploy Wizard.
  • Configure Okta Verify to work in a proxy-enabled environment

    When you deploy Okta Verify in a proxy-enabled environment, an extra configuration step is required to allow automated updates.

    You can configure proxy settings during installation using a ProxyURL or a ProxyPacLocation argument, depending on your environment. You can also configure Okta Verify to allow automated updates.

    For a proxy server, enter these parameters:

    OktaVerifySetup-x.x.x.x-yyyyyyy.exe

    ProxyURL=https://proxy.sample.com:3888

    For proxy auto configuration, use OktaVerifySetup-x.x.x.x-yyyyyyy.exe ProxyPacLocation=<pac-file-location>.

    Related topics

    • Deploy Okta Verify to Android devices
    • Deploy Okta Verify to iOS devices
    • Deploy Okta Verify to macOS devices
    Deploy Okta Verify to Windows devices (2024)

    FAQs

    Can Okta Verify be installed on a PC? ›

    Note for administrators: Okta Verify for Windows is only available on Okta Identity Engine. If your IT department prompts you to set up Okta Verify on your Windows device, follow the instructions to install the app and set up your account. If your setup is successful, you receive a confirmation message.

    Does Okta work with Windows? ›

    Okta supports Microsoft's modern browser, authentication methods, and provides efficient single sign-on and device management for all your Windows 10 ecosystem.

    Can I install Okta Verify on multiple devices? ›

    Include step-by-step instructions whenever possible. The user can add multiple devices (phones) to Okta Verify by going to the user's Settings tab in their Okta Dashboard and clicking Set Up Another under Okta Verify in Security Methods.

    How do I add Okta to my desktop? ›

    To add the Desktop MFA functionality to a Windows device, several steps must be completed :
    1. Create and configure the Desktop MFA app integration. ...
    2. Deploy Desktop MFA for Windows to the endpoints. ...
    3. Configure Desktop MFA policies. ...
    4. Create an offline one-time password. ...
    5. For Okta Verify OTP. ...
    6. For Offline YubiKey.

    What is Windows Hello with Okta Verify? ›

    User verification with Windows Hello

    During enrollment, Okta Verify prompts users to enable Windows Hello confirmation. When the authentication policy requires two factor types or user verification, Okta Verify prompts users to confirm their identity with Windows Hello biometrics or PIN.

    What is the difference between Okta and Okta Verify? ›

    What is the difference between Okta Mobile and Okta Verify? 'Okta Mobile' is the mobile app that allows you to access all of your applications on a mobile device. 'Okta Verify' is the mobile app that allows you to have a second factor for Multifactor Authentication (MFA).

    What is the Microsoft equivalent of Okta? ›

    In the web application single sign-on (SSO) landscape, admins are often comparing Azure Active Directory (Azure AD or AAD) and Okta. Interestingly, while both compete in the Identity-as-a-Service (IDaaS) or web app SSO market, they both also heavily rely on Microsoft Active Directory to function at a high-level.

    Why Microsoft customers choose Okta? ›

    Microsoft customers also choose Okta for identity because of its strong partnership and broad integration with Microsoft products including Office 365, Windows 10, Azure Active Directory, SharePoint, and Intune. Okta's cloud-based identity solution works great with Microsoft and other technology vendors.

    How do I add Okta to another device? ›

    Start this task
    1. Start on the device where you already have an Okta Verify account. ...
    2. Install Okta Verify on your new Android device.
    3. Open the app, and then tap Add account from another device and follow the instructions.
    4. Set up the account. ...
    5. Confirm that you're pairing the right devices.

    How do I install Okta Verify app? ›

    Set up Okta Verify on your Android device with a QR code
    1. Start the setup on your computer. ...
    2. Enter your username (email address) and password, and click Sign In.
    3. If you're prompted to set up Okta Verify, follow the instructions.
    4. On your device, download Okta Verify from the Google Play Store – Okta Verify and install it.

    Does Okta Verify work on WIFI? ›

    The Okta Verify app will continue to provide numeric multi-factor codes on your smartphone or tablet even with no cell or wi-fi connection. When prompted for an MFA factor during the logon, simply open the Okta Verify app on your phone and enter the provided 6-digit code.

    Can you get Okta Verify on pc? ›

    You can deploy Okta Verify to Windows endpoints by running a command or by using a device management solution (MDM).

    Does Okta have a Windows app? ›

    Okta apps and plugins are available for Windows 10 through the Windows Store for Business.

    How to setup Okta with Active Directory? ›

    On the host server, open a web browser and sign in to the Okta Admin Console using an account with suitable permissions. See Okta account with required permissions. In the Admin Console, go to DirectoryDirectory Integrations. Click Add Directory, and then select Add Active Directory.

    How to install Okta Verify? ›

    If you're prompted to set up Okta Verify, follow the instructions. On your device, download Okta Verify from the Google Play Store – Okta Verify and install it. Open the app and follow the instructions to add your account. When prompted, point your camera at the QR code displayed in the browser on the computer.

    How to add Okta plugin in Chrome? ›

    Install the Okta Browser Plugin with Chrome
    1. In the Chrome Web Store, go to the Okta Browser Plugin page.
    2. Click Add to Chrome.
    3. Verify the permissions granted to the Okta Browser Plugin and then click Add Extension. ...
    4. Sign in to the Okta End-User Dashboard to complete the installation.

    Does Okta Verify work without internet? ›

    When devices that host the Okta Verify app are in airplane mode/have no internet connection, Okta verify codes do work to authenticate users who are using another device that does have internet connection. End users have 30 seconds to enter the pass code before the app refreshes with an updated code.

    How do I verify Okta on a new device? ›

    Start this task
    1. Start on the device where you already have an Okta Verify account. ...
    2. Install Okta Verify on your new Android device.
    3. Open the app, and then tap Add account from another device and follow the instructions.
    4. Set up the account. ...
    5. Confirm that you're pairing the right devices.

    Top Articles
    Latest Posts
    Recommended Articles
    Article information

    Author: Tish Haag

    Last Updated:

    Views: 5479

    Rating: 4.7 / 5 (47 voted)

    Reviews: 94% of readers found this page helpful

    Author information

    Name: Tish Haag

    Birthday: 1999-11-18

    Address: 30256 Tara Expressway, Kutchburgh, VT 92892-0078

    Phone: +4215847628708

    Job: Internal Consulting Engineer

    Hobby: Roller skating, Roller skating, Kayaking, Flying, Graffiti, Ghost hunting, scrapbook

    Introduction: My name is Tish Haag, I am a excited, delightful, curious, beautiful, agreeable, enchanting, fancy person who loves writing and wants to share my knowledge and understanding with you.