<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D50Z00008G7VbjSAFOkta Classic EngineIntegrationsAnswered2026-04-24T09:00:25.000Z2018-05-09T15:08:30.000Z2020-12-18T00:10:26.000Z
We get a 403 error when we set the session cookie and include a redirectURL back to our application.
When we set the session cookie it is signed correctly, however, when we add the parameter redirectURL back to our application, we get a 403 error page from Okta. Why are we getting a 403??

 

https://developer.okta.com/use_cases/authentication/session_cookie#retrieving-a-session-cookie-by-visiting-a-session-redirect-link

  • Hello,

     

    Thank you for reaching out to Okta Support, My name is Dorin and I will be handling your case.

     

    As a first troubleshooting step please go from your Admin console to Security > API > Add Origin > Pleae fill in the Name and Origin URL > Under Type please select CORS and Redirect.

     

    If these troubleshooting steps do not work, please open a ticket with us.

     

    Kind regards,

     

    Dorin Sterian
    Expand Post
  • 1cs9b (1cs9b)

    Hi Dorin,

    We are getting similar error too. We tried the above steps. But still fails. What could be the other reasons for this error ? Can you help us ?

  • oir97 (oir97)

    This was two years ago. I am sorry but I do not recall the fix. You might reach out to Okta directly to see if they can help identify the issue.

    - Justin
  • wge4v (wge4v)

    I'm late to the party by six months, but look at the Trusted Origins configuration for the target app and make sure that the "Redirect" checkbox is selected. sessionCookieRedirect uses this setting, not the "Login redirect URI" list on the General Settings page of the application configuration.

This question is closed.
Loading
We get a 403 error when we set the session cookie and include a redirectURL back to our application.