T O P
OktaUncategorized

Okta Verify Delay or Loop on VPN?

We are finally moving towards implementing Okta FastPass in our Okta Identity Engine environment and have begun testing internally. A very early bug we have encountered is that when on our “VPN” (Twingate), the prompt for authentication hangs and takes several seconds to happen.

Digging through Okta Verify logs on the device yielded nothing and after searching around and searching deeper, I found an article on Okta’s support site that yielded the answer – we need to whitelist the domain authenticatorlocalprod.com in our VPN, specifically because that domain gets flagged in the DNS Rebind feature. Once we whitelisted the domain, Okta Verify prompts came through immediately.

Uncategorized

Getting Started with Google Gemini

We’ve begun rolling out Gemini and it’s been moving quickly in terms of updates and rollout. Here are our current settings that are letting users use it. Make sure your legal and compliance teams approve first!

Apps

User Access

Make sure you have a Gemini license, or your data may be used to train models

Service Status

Turn it on for OUs or just groups

GithubOkta

Okta Github Error When Setting Up SCIM with Organization

Like many companies, my organziation uses Github and has multiple Github orgs under our umbrella. However, we don’t have Enterprise Managed Accounts for several reasons. But we have to closely monitor Github accounts due to SOX and compliance reasons and disable access when employees leave the company.

There is a round about way to do this with SCIM and Okta where you use an Okta app called “Github Enterprise Cloud – Organization“, enter your Github organization name, and setup SAML the way you normally would.

When I go to the Provisioning page and click to integrate the Okta app with the Github org, I frequently get an error saying “Error authenticating: Forbidden. Errors reported by remote server:”

After eons of troubleshooting, I’ve found the simplest solution is to make sure you are authenticated with Github, and then in the org you are trying to setup, go to this page: https://github.com/orgs/YOURORG/policies/applications/475360 and click the Approve button. What happened for me is that I wouldn’t see the Okta OAN integration app in our OAUTH apps page, and I couldn’t approve it. But it was waiting for approval. Going to that page above (which I could not find linked to anywhere) fixed the problem for me.

Success!
GSuite / Google WorkspaceUncategorized

Google Groups – Emails are Bouncing

I’ve encountered this error in a few circumstances – users in Google Groups will have a red triangle and the text “Emails are Bouncing” that stops them from receiving any Google Group emails – definitely not good! I’ve seen this when former employees’ accounts are deactivated but not removed from Google Groups and then re-hired or activated later.

The fix is either remove and re-add them to their Google Group via GAM OR to have the employee go to groups.google.com, click the gear icon in the upper right, and click Global Settings.

From there, they should see under “Bounce Status” that their email is flagged as bouncing and a link that says “Resend request to recheck status” or something like that. After that, they’ll see a message that says “your email is not flagged as bouncing”. That’s it!

Uncategorized

Bypass / Remove Windows Evaluation Restart

I ran into this one recently on a VM I run for Windows – I let the evaluation license expire but couldn’t recreate a new VM.

Even though I am logged in with an administor account, I do not have access to disable the service that checks and reboots the computer. To disable this service, you can do the following:

  1. Download PsExec tools from Microsoft site here
  2. After downloading, extract the files to any folder
  3. open cmd and Run as administrator
  4. cd to the folder path
  5. execute psexec -i -s cmd.exe
  6. This will open another cmd prompt as shown below :

7. Now type whoami to confirm you are the system (as shown below)

Type services.msc as shown above

9. This will open services and now you can navigate to Windows License Monitoring Service and disable it

10. Restart the VM or computer and the service will be disabled, won’t start, and your machine will be good to go!