There might be specific AD attributes, which - apart from others - do not appear in the Okta user profile. Can those extra attributes be mapped and provisioned towards an app?
Solution: Yes, but you need to have a SAML 2.0 integrated app or such flow

• A.Yes
• B.No

Comment: *

Name: *

Email: *

Verification: *

Regarding policies, Okta recommends:
Solution: To include a policy rule that catches not wanted behaviors as a first priority and then label others for permitted behaviors

• A.Yes
• B.No

Comment: *

Name: *

Email: *

Verification: *

With agentless DSSO (Desktop Single Sign-on), you still have a need of deploying IWA Agents in your Active Directory domains to implement DSSO functionality.
Solution: The statement is true, as agentless DSSO means no AD agents, not no IWA agents

• A.Yes
• B.No

Comment: *

Name: *

Email: *

Verification: *