Adobe Acrobat Standard Install – Okta Configuration Requirements

This article is about fixing Adobe Acrobat authentication issues by enabling Okta feature flags (STATE_TOKEN_ALL_FLOWS and ADSSO_STATE_TOKEN) to preserve authentication state when using external identity providers.

This issue was resolved after working with Okta Support. The non-enterprise version of Adobe Acrobat Standard requires additional Okta features to be enabled in order to preserve state when using external identity providers.

The following features must be enabled:

• STATE_TOKEN_ALL_FLOWS

• ADSSO_STATE_TOKEN

Details from Okta Support

Enabling these features ensures proper state management during authentication:

• STATE_TOKEN_ALL_FLOWS
  Bootstraps a state token for most authentication flows to maintain state. This helps resolve issues where Okta must preserve authentication state for applications it is establishing authentication for. Note: This feature will be deprecated with OIE because OIE natively addresses the behavior that originally required this flag.

• ADSSO_STATE_TOKEN
  Generates a state token specifically for Agentless Desktop SSO (ADSSO) flows. This feature is already enabled in your environment.

After enabling these features and re-testing, the issue with the standalone Adobe Acrobat application was resolved.