Hi Team,

When we are trying to open Confluence from the tile of the okta we are unable to get the landing page and getting a page not found error. when we are trying to open Confluence using a URL without Okta it's working fine.

We have raised a Atlassian ticket below is the reply from them.

---->As part of Atlassian’s commitment to Trust and Security, regarding CVE-2023-22522, the latest Confluence versions will no longer allow JSP files to be loaded from the <confluence-install-dir>. Any custom JSP file placed in the <confluence-install-dir> must now be converted to Velocity .vm file format. Corresponding apps that attempt to load customized JSP file(s) must be updated to refer to the converted .vm file.

Based on the affected URL, it appears that Okta is trying to load a JSP file at runtime, which would result in the action being blocked and causing users to encounter a 404 error.

You can find more details regarding this behavior change in the following article:

• Resource name must end with .vm, .vmd, .css or .xml error after Confluence is upgraded

Please share the above information with the Okta Support team. Okta support team will need to review where in the IDP they are redirecting the authentication back onto <confluence-base-url>/okta_acs.jsp and have this updated to:

• Either <confluence-base-url>; or
• A new implementation that does not use JSP but velocity such as <confluence-base-url>/okta_acs.vm

Thanks,

Indra