<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z00006rslRICAYOkta Classic EngineSingle Sign-OnAnswered2021-03-22T08:33:57.000Z2021-03-12T10:00:02.000Z2021-03-22T08:33:57.000Z
OpenIDConnect application is not working as expected when a routing is enabled for SAML IDP

Configuration details -

 

1) We have an application(React) which is consuming Okta Sign-In Widget for authentication process.

(Configure this React application as SPA in Okta)

2) We have an IDP(Configured Azure as IDP) and routing rule is in place.

 

 

Issue -

 

When an end user accessing this application(React), based on routing rule Okta is redirecting the user to Azure for authentication and after successful authentication, Okta is not redirecting the user to configured/requested redirect URI(instead of this Okta is taking the user to Okta user home page).

 

Note - Same behavior working as expected(Okta is able to redirect the user to application redirect URI) with direct Okta authentication/Delegated Authentication(without routing rule)

 

Any help/suggestions please?

 

Thanks,

 


  • Hi Venkateshwar,

     

    Based on your description it is possible that Azure is dropping the relay state in this case, since post IDP authentication, it should go back to the app login flow.

    To determine where the state is dropped, try tracing the flow and analyze where it goes missing in the request logs, a HAR file should suffice to analyze this.

    If you need further assistance, I would recommend opening a support ticket so that we can discuss.

     

    Thank you,

    Bogdan Andrisan

    Developer Support Engineer

    Expand Post
    • Hello Bogdan,

       

      Thank you for the response.

       

      FYI - I have already reviewed the trace and I can see, Okta is not processing the Redirect URI as the relay state when forwarding the authentication request to Azure(SAML IDP).

       

      Thanks,

      Expand Post
This question is closed.
Loading
OpenIDConnect application is not working as expected when a routing is enabled for SAML IDP