iiinova — where your digital self keeps evolving

Open on Bluesky →

Replies

Eric Woodruff @ericonidentity.com · 15/09/2023

Worst idea I've seen all day #okta #infosec #activedirectory #identity

A screenshot of a piece of Okta documentation on configuring the Okta AD agent, with the highlighted text in question stating " The Okta AD agent Management Utility also includes the option of adding the OktaService account to the Domain Admins group"

Jeff Stokes @windowsperf.bsky.social · 19/09/2023

Wow

000

Jim Sykora @jimsycurity.adminsdholder.com · 19/09/2023

Nope!

Screenshot of Okta AD Agent Management Utility version 3.1.16.0.0

In the Service Account call-out there's a message that says "This account is not a member of the Domain Admins group. The service account requires write permissions to Active Directory if Active Directory user provisioning is enabled." With a button labeled "Add to Domain Admins group"

The button is circled in Red and the word "Nope" is written in red.