Troubleshooting Initial Express Configuration Setup for Okta Integration Network
Last Updated:
Overview
When attempting to perform the initial setup for an Okta Integration Network (OIN) application using Express Configuration, the process fails to complete. This issue typically manifests as an inability to establish a connection between Okta and the target application (such as Auth0) during the configuration wizard and may result in an HTTP 503 error.
Applies To
- Okta Integration Network (OIN)
- Express Configuration
- Okta Identity Engine (OIE)
- Application Provisioning
Cause
This failure is generally caused by one of the following:
- The administrator performing the setup lacks the specific Express Configuration admin role within the Auth0 tenant.
- A mismatch or corruption in the PEM key exchange between Okta and the Auth0 dashboard.
Solution
To resolve this issue, ensure the correct administrative roles are assigned and regenerate the integration keys by following these steps:
Verify Auth0 Permissions
- Log in to the Auth0 Dashboard.
- Navigate to User Management > Users.
- Select the user account attempting to perform the integration.
- Click the Roles tab.
- Click Assign Roles.
- Select Express Configuration admin and click Assign.
Regenerate and Upload PEM Key
- In the Okta Admin Console, restart the OIN Wizard for the specific application.
- In the Express Configuration for Auth0 apps window, click Download Key (.pem) to save the certificate to the local device.
- Open a new tab and log in to the Auth0 Dashboard.
- Navigate to Applications > [Application Name].
- Select the Okta Integration Network tab.
- Click Create OIN Integration.
- Upload the
.pemfile downloaded from Okta in Step 2. - Complete the configuration in the Okta OIN Wizard.
