Okta Verify Displays a Something Went Wrong Error When Signing In on macOS

Okta Verify displays a "Something went wrong" error on macOS when a Virtual Private Network (VPN) or Secure Sockets Layer (SSL) inspection tool intercepts traffic. Bypassing Okta URLs from SSL inspection tools resolves this issue. When attempting to sign in on macOS using Okta Verify, Okta Verify displays the following error message:

Something went wrong. Please try again.

• Okta Identity Engine (OIE)
• Multi-factor Authentication (MFA)
• Devices
• Okta Verify for macOS

For security reasons, Okta does not allow the inspection or modification of traffic between Okta Verify and Okta endpoints. A VPN or SSL inspection tool acts as a man-in-the-middle, inspecting or blocking traffic. Okta agents utilize SSL pinning to mitigate man-in-the-middle attacks, causing SSL inspection to disrupt authentication flows.

What steps resolve the Okta Verify sign-in error?

Collect the Okta Verify logs, review the logs for specific SSL pinning errors, and configure the network to bypass Okta URLs from SSL inspection tools by following these steps.

1. Collect Okta Verify Logs from Desktop (macOS / Windows).
2. Check the specific timestamp of the error and verify if the logs contain the following errors.

{🛑 "Loopback": {"message": "Error during authentication flow: accountNotFound", "defaultProperties": "", "location": "LoopbackRequestHandler.swift:handle(_:completion:):64"}}
{🛑 "Loopback": {"message": "Connection3: HandleLoopback complete failed with: Bad request", "defaultProperties": "", "location": "ServerConnection.swift:processChallengeRequest(request:success:failure:):242"}}
{🛑 "Storage error": {"message": "Error: itemNotFound", "defaultProperties": "", "location": "OktaKeyValueStorageManager+Enrollments.swift:enrollmentKeys():264"}}

3. Ensure the network does not inspect traffic for Okta Domains. Administrators do not need to turn off the VPN, but bypassing Okta URLs from any SSL inspection tools ensures proper functionality.
4. Review Unable to Enroll Okta Verify on Windows - "The sign-in URL is not secure" or "Generic enrollment error" for alternative solutions.