Troubleshooting "Login denied" Error for Amazon WorkSpaces RADIUS App in Okta
Jan 16, 2026
Integrations
Okta Classic Engine
Multi-Factor Authentication
Okta Identity Engine
Overview
When adding and assigning the Amazon WorkSpaces RADIUS app from Okta's catalog (OIN), administrators may encounter the following error message. This article provides steps to troubleshoot this issue.
Login denied. No matching user is assigned to RADIUS App Amazon WorkSpaces.
Applies To
- OIN - Amazon WorkSpaces App
- Single Sign On (SSO)
- Multi-Factor Authentication (MFA)
Cause
Solution
To troubleshoot this issue, follow these steps:
- Confirm the correct username format: If the AWS WorkSpace requires a SAM account, ensure that the same format in Okta is selected by going to Amazon WorkSpaces App > Sign On > Application username format.
- Unassign and re-assign users: Click on the Assignments tab, unassign all users, and then re-assign them with the correct matching usernames.
- Validate the configuration: Launch the WorkSpaces RADIUS app and attempt to log in to verify that the issue has been resolved.
