This article addresses a common issue that can arise during the configuration of a Secure Assertion Markup Language (SAML) RelayState. Instead of being redirected to the intended RelayState, users find themselves redirected to https://{OktaOrg}/app/UserHome.

• Secure Assertion Markup Language (SAML) RelayState
• Trusted Origins Redirect
• Single Sign-On (SSO)

Configure the URL as a Trusted Origins Redirect. Follow these steps within the Okta Admin Console:

1. Access the Okta Admin Console.
2. Navigate to Security > API > Trusted Origins.
3. Click Add origin.

4. Specify the base URL of the website from which cross-origin requests should be allowed.
5. Ensure that Redirect is selected as a Type.

6. Click Save.

By correctly setting up the URL as a Trusted Origins Redirect, the SAML RelayState should now redirect users to the intended location.

Related References

• Okta Classic - Configure Trusted Origins
• Okta Identity Engine - Configure Trusted Origins