
BalajiD.47986 (Customer) asked a question.
okta desktop SSO IWA agent problem
I'm trying to perform Okta desktop SSO but the IWA agent couldn't able to contact the service account of the active directory. It's showing an error in installing the agent.

Hi @BalajiD.47986 (Customer) , Thank you for reaching out to the Okta Community!
Sounds like permission issue, the IWA app needs to be able to communicate with the AD Agent (mainly for health checks).
Sometimes, depending on the environmental configurations, the IWA agent might need to be installed on a different server than the one hosting the AD agent.
Here are a couple articles for DSSO troubleshooting in case you encounter other issues as well:
https://okta-help.pixtulate.com/en/prod/Content/Topics/Directory/dsso-troubleshooting.htm
https://okta-support.pixtulate.com/help/s/article/IWA-Troubleshooting-Guide?language=en_US
That being said, while the classic DSSO is still supported, my advice would be to look towards implementing the Agentless Desktop Single Sign-on.
https://okta-help.pixtulate.com/en/prod/Content/Topics/Directory/Configuring_Agentless_SSO.htm
Hope this helps!