Sync OKTA and AD password

[soso]

Hello
How are you OKTA Community !?

hello,

I search to synchronise my Active directory Password with OKTA.
So i must use Desktop Single Sign One (DSSO).
I want to use my Email adress to login OKTA with Active Directory Password
I don’t know if i must use “OKTA AD password Sync” Agent or not …? or agentless …? or DSSO …
can you help me about this subject ?

thank you so much for your help

i have read the support article but don’ t find the answer…
https://help.okta.com/en/prod/Content/Topics/Directory/Installing_Configuring_Active_Directory_Password_Sync_Agent.htm

[phi1ipp]

There are multiple ways to integrate with AD. Maybe you just need to delegate authentication from Okta to AD, that would be the simplest. Every time a user will try to sign into Okta, a request will be send to AD to validate username/password used.

If the scheme above will suffice your requirement, it’d be much simpler than DSSO or Password Sync agent. AD Password Sync intercepts password change operations in AD and clone a new password into Okta. The difference is the former approach doesn’t have a password stored in Okta, while the latter one does have it in the cloud

[soso]

hello philipp,

Thank you, If i have understand , I could use authentification Active directory information
(login and password xxxxx@domain.com / pwd AD ) without install ‘AD password Agent’ or DSSO mode but just in enable ’ delagate authentification’ mode ?
Many application is linked to OKTA, and login with the same information (xxxxx@domain.com / pwd AD)

thank you philipp !

[soso]

hi all,

Just enable delagate authentification mode and password synchronisation works.
thank you all !