Error idx.error.code.no_matching_policy "You are not allowed to access this app. To request access, contact an admin"
Jan 27, 2026
API Access Management
Okta Identity Engine
Overview
This article discusses the error idx.error.code.no_matching_policy:
You are not allowed to access this app. To request access, contact an admin.
Applies To
- Okta Identity Engine (OIE)
- OpenID Connect (OIDC)
- Okta Embedded Sign-in with SDK
- Custom Authorization Server
Cause
This error is thrown from the SDK when using embedded authentication, and the Interaction Code grant type is not enabled in the Access Policy of the custom authorization server being used.
Solution
Ensure that there is a matching Access Policy for the application. Within that policy, please also ensure there is a rule that has the Interaction Code enabled in the custom authorization server's access policy rule.
The access policies can be found by going to Security > API > Authorization Servers > {Custom Authorization Server} > Access Policies. Below is a screenshot of the grant type that should be enabled:
