Users experience an infinite loop after submitting credentials on the Okta login page due to a time skew on the local device or an invalid bookmark. Synchronize the system time, use the base Okta URL, or add the Okta domain to the trusted sites list to resolve the loop. The browser cycles between the following URLs, and Okta does not direct the user to the End-User Dashboard:

• https://<subdomain>.okta.com/app/UserHome

• https://<subdomain>.okta.com/enduser/callback

• Okta Identity Engine (OIE)
• Okta Classic Engine
• End-User Dashboard

This issue occurs when the system time on the authentication device falls out of synchronization with the Okta server. Additionally, attempting to access the dashboard using a bookmark that contains an invalid state token or a long authorization URL causes the loop.

How to resolve the infinite loop by synchronizing the system time?

Verify the device date and time settings, synchronize the time on a Windows or macOS computer, or modify the clock directly on the central server.

1. Verify that the device Date and Time settings use the Set time automatically option.
2. Go to Settings, select Time & Language, choose Date & time, and select Sync now on a Windows computer.
3. Go to System Settings, select General, choose Date & Time, and ensure the source uses a valid time server on a macOS computer.

NOTE: If the device clock receives date and time settings from a central server, modify the clock directly on the server.

How to resolve the infinite loop by utilizing the base URL?

Clear the browser cache and cookies, navigate directly to the base Okta URL, and create a new bookmark.

1. Clear the browser cache and cookies.
2. Navigate directly to the Base Okta URL (for example, https://<subdomain>.okta.com).
3. Upon successful login, delete the old bookmark and create a new one using the base URL.

How to resolve the infinite loop by adding the Okta domain to Trusted Sites?

Add the Okta domain to the Trusted Sites list in the browser or local security software to ensure security software does not block the callback URL.

1. Add the Okta domain (for example, https://<subdomain>.okta.com) to the Trusted Sites list in the browser or local security software.