Configure WS-Federation

Question 1

What are the 2 sign-on methods for MS 365

Answer 1

Secure Web Authentication (SWA) and WS-Federation (WS-Fed), which is the more secure and preferred method.

Question 2

What does SWA rely on

Answer 2

SWA relies on a username and a password for security credentials that can be selected by the end user or assigned by the administrator

Question 3

What does WS-Federation rely on

Answer 3

WS-Federation is a specification that defines mechanisms to transfer identity information using encrypted SOAP messages. It adds an additional level of security. WS-Federation does not require a separate password for Office 365; consequently, Okta does not need to sync user passwords when WS-Federation is used.

Question 4

How do you set up WS-Federation

Answer 4

1. If Microsoft Office 365 is already set up, select Applications from the Administrator Dashboard, locate and select the Microsoft Office 365 app, and then select the Sign On tab. If you are setting up Microsoft Office 365 for the first time, access the Sign On tab by clicking Next from the General Settings tab.
2. For SIGN ON METHODS, check the WS-Federation radio button.
3. Click View Setup Instructions, shown below. They provide recommendations to prepare your domain for federated authentication.
4. Specify whether you want to:

Configure WS-Federation myself using PowerShell.

Let Okta configure WS-Federation automatically for me.

5. If you select to have Okta configure WS-Federation automatically, enter your Microsoft 365 API Admin Username and Password. The Default Relay State is optional. (The default relay state is the page your users will land on after they successfully log in.)
6. Click Save

Question 5

How do you Create a SAML Integration using AIW - Task 1

Answer 5

Note: Ensure that you add Okta to your browser’s allow list for 3rd-party cookies to prevent errors in your integrations. See Allow Third-Party Cookies for detailed instructions.

Task 1: Launch the Wizard

1. Verify that you are using the Admin Console. If you are using the Developer Console, you need to switch over to the Admin Console. If you see < > Developer Console in the top left corner of your console, click it, then click Classic UI to switch.
2. In the Admin Console, go to Applications > Applications.
3. Click Add Application.
4. Click Create New App.
5. To create a SAML integration, select Web as the Platform and SAML 2.0 for the Sign on method.
6. Click Create.