An Okta Integration Network (OIN) submission fails during Security Assertion Markup Language (SAML) testing due to incorrect expressions in the SAML properties. During the testing phase, attempting to access the target application via Single Sign-On (SSO) fails and redirects the user to a blank page with the following URL:

about:blank#blocked

Update the SAML configuration with the correctly prefixed expressions to resolve the issue.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Okta Integration Network (OIN)
• OIN Wizard
• Security Assertion Markup Language (SAML) 2.0 Integrations

This issue occurs when incorrect expressions populate the Default ACS URL and Entity ID / Audience Restriction fields within the SAML properties. Specifically, the failure happens if the expressions lack the org. prefix, such as using ${assertion_consumer_url} instead of ${org.assertion_consumer_url}.

How are the SAML properties updated to resolve the blank page redirect?

Update the SAML configuration in the OIN Wizard to use the correctly prefixed expressions and re-run the submission tester.

1. Go to the integration settings in the OIN Wizard.
2. Locate the SAML properties section.
3. Enter the following values to update the expressions:
   • Default ACS URL:https://${org.assertion_consumer_url}
   • Entity ID / Audience Restriction:${org.entity_id}
4. Save the configuration changes.
5. Generate a new test instance if the OIN Submission Tester displays a "No instance detected" message, and re-run the OIN Submission Tester to verify that all SSO flows pass successfully.

Related References

• Okta Expression Language Overview Guide
• Submit an Integration with the OIN Wizard (SAML)
• Publish an OIN Integration Overview