Okta Error Occurs When Authenticating With Apple Business Manager SCIM

An error occurs when authenticating with the Apple Business Manager System for Cross-domain Identity Management (SCIM) integration in the Okta Admin Console. An incorrectly formatted authorization callback URL causes the issue. Format the callback URL correctly to resolve the issue. Okta generates the following error message when navigating to the Provisioning tab and selecting Integrations:

Permission denied to access property "document" on cross-origin object

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Apple Business Manager
• System for Cross-domain Identity Management (SCIM)

An incorrectly formatted authorization callback URL causes the error.

How is the authorization callback URL formatted?

Locate the application bundle name in the Okta Admin Console and format the authorization callback URL correctly.

1. Navigate to the Okta Admin Console.
2. Go to Applications and Resources > Applications and select the Apple Business Manager application.
3. Locate the <SAML_AppBundleName> in the browser URL. For example, in the URL https://example.okta.com/admin/app/example_saml_1/instance/0oa4wfdfazHNeCJjy1d8/#tab-assignments, the bundle name is example_saml_1.
4. Format the authorization callback URL using the following syntax:

   https://system-admin.okta.com/admin/app/cpc/<SAML_AppBundleName>/oauth/callback

5. Replace <SAML_AppBundleName> with the value found in step 3. For example, if the bundle name is example_saml_1, the correct authorization callback URL is:

   https://system-admin.okta.com/admin/app/cpc/example_saml_1/oauth/callback