Okta SAML RelayState Redirects to /app/UserHome Instead of Intended URL
Last Updated:
Single Sign-On
Okta Classic Engine
Okta Identity Engine
Overview
When configuring a Secure Assertion Markup Language (SAML) RelayState, Okta incorrectly redirects users to https://<OktaOrg>/app/UserHome instead of the intended URL because the Okta configuration lacks the URL as a Trusted Origins Redirect. Add the URL as a Trusted Origins Redirect in the Okta Admin Console to resolve the redirection failure.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Secure Assertion Markup Language (SAML) RelayState
- Trusted Origins Redirect
- Single Sign-On (SSO)
Cause
The Okta configuration does not include the URL as a Trusted Origins Redirect. This missing configuration causes the SAML RelayState to redirect incorrectly.
Solution
How is the URL configured as a Trusted Origins Redirect?
Navigate to the Trusted Origins settings in the Okta Admin Console and add the website's base URL as a redirect type.
- Open the Okta Admin Console.
- Go to Security > API > Trusted Origins.
- Select Add origin.
- Enter the base URL of the website from which Okta should allow cross-origin requests.
- Select Redirect as the Type.
- Select Save.
