MicroStrategy ONE

Updating the MicroStrategy Identity Agent for Okta

After you have installed and integrated Okta Universal Directory, you can update the Agent once there are updates available from Identity Manager. To cluster multiple Agents for your MicroStrategy Identity Network, you first need to update the Identity Agent before adding another agent to the network.

You have configured Okta Universal Directory with MicroStrategy Identity.

You have administrative access to Identity Manager.

You know your MicroStrategy Identity Server URL.

You know the location of your MicroStrategy Identity Server certificate chain. When you upgrade, the Identity Agent may not recognize the default CA list. Therefore, if you cannot find the certificate in the default list, you will need to re-add it.

To Update the Okta Universal Directory Agent

  1. Navigate to the agent service and stop the agent.
  2. Create a backup of the /res and /logs folders.
  3. Log into MicroStrategy Identity Manager.
  4. On the main landing page, under Users and Badges.
  5. On the right side of the Agent configuration, click the arrow icon and select Download Agent. Note the location on your computer where the installation file (for example, okta_installer.exe) is saved.
  6. Copy the registration code as you need the code to complete the Agent update. Be aware that the code expires every 5 minutes.
  7. On the machine where you want to update the Identity Agent for Okta Universal Directory, open and run the Identity Agent installation file as an administrator by right-clicking on okta_installer.exe and select Run as administrator.
  8. At the setup screen for upgrading the Identity Agent, click Yes.
  9. At the Resuming the InstallShield Wizard for Identity Agent for Okta Universal Directory screen, click Next.
  10. Click Finish to close the installation wizard.
  11. Select Update configuration, then click Next.

  12. Re-add the CA certificates.

    If you previously added your MicroStrategy Identity Server certificate chain, the new Agent may not recognize the default CA list. If you cannot find the previously added certificate, you must re-add your MicroStrategy Identity Server certificate chain to the default CA list. Enter the name of the certificate, and then click Browse to select your certificate. When your certificate name and path are specified, click Add to CA list.

  13. Click Next.
  14. Enter your information to match the values you selected when Okta Universal Directory Agent was configured for the first time. You must be sure to enter the same values, or the Identity Agent won't be updated correctly. Since you specified your certificate information on the previous page, you are not required to re-enter your certificate information.
  15. When finished, click Submit. MicroStrategy Identity tests the connection with your Okta Universal Directory server and completes the configuration of your Identity Agent. If all configuration information is correct, the Identity Agent is restarted automatically.
  16. Check to ensure that your Directory Agent service is running.

After the Okta Universal Directory Agent has been updated, you can add another agent to create an Okta Universal Directory Agent cluster. For steps, see Synchronizing Users from Okta.

Related Topics

Distributing Badges to Users in Your MicroStrategy Identity Network

Managing Users from an IDM System that is Synchronized with MicroStrategy Identity

Editing and Removing Users