Mass Deployment Guide for the GateKeeper Okta Plug-In

 

Overview

The GateKeeper Okta Plug-In can be installed silently using an MSI command. This allows IT administrators to deploy the plug-in to multiple computers through tools such as Group Policy, RMM, Intune, or other software deployment platforms.

The installation command can also preconfigure the browser, Okta domain, redirect URL, auto-launch behavior, and browser clearing settings.

Silent Installation Command

Use the following command format:

msiexec /i "GateKeeper-OktaAccess-Win.msi" /qn /l c:\temp\goktaaccess.log BROWSER=chrome OKTAURL=youroktadomain.okta.com REDIRECTURL=youroktadomain.okta.com AUTOLAUNCH=True AUTOLAUNCHDELAY=5 CLEARBROWSER=True IGNOREUSER=False SETCOOKIEPOLICY=True

Replace the following values with your organization’s information:

OKTAURL=youroktadomain.okta.com
REDIRECTURL=youroktadomain.okta.com

For example, if your Okta domain is:

company.okta.com

The command would be:

msiexec /i "GateKeeper-OktaAccess-Win.msi" /qn /l c:\temp\goktaaccess.log BROWSER=chrome OKTAURL=company.okta.com REDIRECTURL=company.okta.com AUTOLAUNCH=True AUTOLAUNCHDELAY=5 CLEARBROWSER=True IGNOREUSER=False SETCOOKIEPOLICY=True

---

Installation Parameters

BROWSER

Specifies which browser the GateKeeper Okta Plug-In should use.

Example:

BROWSER=chrome

---

OKTAURL

Specifies your organization’s Okta domain.

Example:

OKTAURL=youroktadomain.okta.com

---

REDIRECTURL

Specifies the page that should open after the user is authenticated. This can be your Okta dashboard or a specific Okta application URL.

Example:

REDIRECTURL=youroktadomain.okta.com

---

AUTOLAUNCH

Determines whether the GateKeeper Okta Plug-In launches automatically when the computer is unlocked.

Recommended value:

AUTOLAUNCH=True

---

AUTOLAUNCHDELAY

Determines how many seconds the plug-in waits after unlock before launching.

Recommended value:

AUTOLAUNCHDELAY=5

We recommend using approximately 5 seconds to allow the Windows desktop environment to fully load before launching the plug-in.

---

CLEARBROWSER

Determines whether the plug-in clears existing browser windows and cookies before launching a new browser window.

Recommended value:

CLEARBROWSER=True

---

IGNOREUSER

If AUTOLAUNCH=True and IGNOREUSER=True, The plug-in will launch every time the computer is unlocked, even if the same user is unlocking the computer again.

Recommended value:

IGNOREUSER=False

This helps prevent the plug-in from launching unnecessarily when the same user is returning to the workstation.

---

SETCOOKIEPOLICY

Sets the browser cookie policy so cookies are cleared when the browser exits.

Recommended value:

SETCOOKIEPOLICY=True

---

Recommended Command

msiexec /i "GateKeeper-OktaAccess-Win.msi" /qn /l c:\temp\goktaaccess.log BROWSER=chrome OKTAURL=youroktadomain.okta.com REDIRECTURL=youroktadomain.okta.com AUTOLAUNCH=True AUTOLAUNCHDELAY=5 CLEARBROWSER=True IGNOREUSER=False SETCOOKIEPOLICY=True

Before running the command, make sure:

The MSI file is available on the target computer or deployment share.

The command is run with administrator privileges.

The folder c:\temp exists, or update the log path to a valid folder.

For any additional questions or concerns regarding faster 2FA, proximity settings, computer locking, password management, or compliance, please contact GateKeeper Enterprise support using the Support Ticket form on https://gkaccess.com/support/ or email [e-mail].