This message was deleted.

If I remember correctly @Mike Streetz (O_P) has done something with Okta

oooh, for cloud gateway I don’t know, you don’t have a lot of control over that

Right, so we gateway service i am stuck with FAS… probably will keep gateway on prem and use one of the authentication options… was Okta expensive? any advantages over Azure AD SAML? thanks

okta verify is pretty cool and the okta agent can work with your on prem AD and do some fancy stuff, but if it’s just for the Netscaler there’s no real benefit over Azure AD SAML unless you really don’t want to run FAS

We're running FAS, as we originally set up to use AzureAD, but have since switched to Okta. We're still running FAS, but based on this thread, it might no longer be necessary?

You can do it without it but I wouldn't rip it out, the setup is not without it's limitations

so FAS is still needed to provide SSO even when the gateway is on prem…

Fas is the saml to kerberoy magic sauce