This article explains how to configure Desktop Single Sign-On (DSSO) using Okta with Amazon WorkSpaces and Amazon Connect, enabling agents to access applications without repeated credential entry while optimizing audio quality.

• Desktop SSO allows automatic authentication via identity provider using Kerberos tickets and SAML assertions
• Solution splits audio handling: media CCP runs on endpoint, media-less CCP runs in WorkSpaces
• Requires creating service account in Active Directory with specific SPN configuration
• Enable Agentless Desktop SSO in Okta console and configure routing rules
• Deploy group policies for Chrome and Firefox browsers to allow Kerberos authentication
• Configure Amazon Connect audio optimization in WorkSpaces using embedded app URL from Okta
• Eliminates password prompts for agents accessing Amazon Connect from both desktop and WorkSpaces

This setup streamlines user experience by enabling single sign-on across desktop and virtual environments while maintaining audio quality for contact center operations.