
s5g31 (s5g31) asked a question.
Some of my users are encountering an error when attempting to interact with Google API enabled components. The common variable amongst all of these users is an Okta auth flow. They are able to use this Auth flow just find to sign into the app. But, when using Google Picker in particular, the sign-in is unsuccessful.
These users are internal, so I can access their configs through the Okta admin. I'm curious if this is a known issue. If not, how can I begin debugging?
I am not familiar with Okta configs.

Hello
Thanks for posting.
If my understanding is correct, the users are able to login when they Sign in using Okta, but if they try to do it directly from Google see something like this, and it will not sign in:
First thing I suggest you is to add a prompt parameter mentioned in https://stackoverflow.com/questions/37711665/forcing-a-user-to-choose-an-account-via-google-oauth2
Okta sign in widget is dependent on auth-js.
You can refer the prompt parameter use case here:
https://github.com/okta/okta-auth-js#token
https://developer.okta.com/docs/reference/api/oidc/#parameter-details
If after following this process, you still need assistance please create a Ticket with our Support Team using the information in the link below: https://help.okta.com/en/prod/Content/Topics/Directory/get-support.htm
Let us know if this helps you.
Daniela Chavarria.
Okta Inc.
Hi, Daniela! Thank you for the reply!
I've tried enforcing consent a couple of different ways. While this has applied appropriately to other parts of my application, it still does not resolve the Picker issue. The Auth token I receive from Gapi's `.getAuthInstance()` appears valid, but Picker does not seem to recognize the sign-in.
What should I be doing with `auth-js` exactly?
I'm digging into the differences in the Picker requests with the new params. The one that is succeeding looks like this:
Query String Parameters
Form Data
The one that fails looks like this:
Query string parameters