← Course Home
Okta Certified Administrator · Part I

Identity and Access Management

36% of the exam — the single largest domain.

Identity & Access Management

Module 4: Architecture

2 sub-topics · this deck covers sub-topic 1 of 2

↑ Module 4 Overview

The Exam Bullet

"Demonstrate knowledge of how to configure RADIUS applications"

Not every system in a company speaks SAML or OIDC. Some older infrastructure — VPN concentrators, load balancers — only understands RADIUS. This sub-topic is about how Okta bridges that gap.

The Mechanism

The Okta RADIUS Server agent lets RADIUS-speaking infrastructure authenticate against Okta. This is commonly used to front VPN devices (like Cisco ASA) and load balancers (like F5), though the same principles extend to similar systems.

What The Documentation Covers

Configuring and running this agent well touches several distinct concerns, each documented as its own topic:

Agent fundamentals · Deployment architectures for different environments · Session persistence · Scaling & throughput capacity · Network zone configuration · Server logging for troubleshooting

The Connection

Session persistence and scaling considerations here echo the same reliability theme as Module 1's agent architecture content — a RADIUS agent that can't keep up with authentication volume creates the exact same kind of bottleneck an under-provisioned AD agent does.

The next sub-topic goes deeper on the high-availability side of that principle, applied specifically to RADIUS (and other advanced agents like MFA and OPP).

The Exam Angle

Watch for scenario questions built around this trap:

→ "A VPN concentrator or load balancer needs to authenticate against Okta, and it only speaks RADIUS." = deploy the Okta RADIUS Server agent.

One Line To Remember

The Okta RADIUS Server agent bridges RADIUS-only infrastructure (VPN devices like Cisco ASA, load balancers like F5) to Okta. Deployment planning spans agent fundamentals, architecture, session persistence, scaling, network zones, and logging.

Sources: help.okta.com — radius-best-pract.htm