What must be installed to configure delegated authentication with Active Directory domains?

To configure delegated authentication with Active Directory domains, the Active Directory Agent must be installed. This component is vital as it allows Okta to securely communicate with your Active Directory (AD) environment. The Active Directory Agent facilitates the process of user authentication and provisioning, ensuring that users can access Okta services while leveraging their existing AD credentials.

In this setup, the agent acts as a bridge between Okta and the on-premises Active Directory, providing secure connectivity and ensuring that authentication requests are properly routed and handled. This enables organizations to maintain their existing authentication mechanisms while benefiting from Okta’s identity management features.

The other options do not serve this specific purpose. For instance, the Active Directory Connector is more related to integrating and managing connections rather than handling user authentication directly. The Okta Authenticator is a mobile application used for multi-factor authentication but does not play a role in the setup of delegated authentication. The Delegated Authenticator Service is not a standalone component that needs installation; instead, it is a feature that is part of the overall Okta authentication mechanisms. Therefore, the installation of the Active Directory Agent is the essential step for configuring delegated authentication effectively.