User16933364689203654390 (Customer) asked a question.
Unable to create an application in Okta OAG.
I have deployed OAG in my local system.
An attempt to create an OAG application fails with the following errors in the UI:
Error An error occurred creating application in your IDP. The error has been logged. Please contact support.
Service Side Error Occurred Server side exception has been logged. Please notify support.
Below is my hosts file entry.
xxx.xxx.x.11 admin domain.tld gw.domain.tld gw-admin.domain.tld
xxx.xxx.x.11 header.domain.tld
I have followed the below link to fix the issue but still getting the same error. Kindly help me to fix this issue.
Hello @User16933364689203654390 (Customer)
Thank you for reaching out to us!
From your screenshot, the error does seem potentially a match for the KB article you mentioned: https://support.okta.com/help/s/article/oag-application-creation-fails-with-a-server-side-error?language=en_US
I wanted to clarify that this KB article is pointing out how this error can occur if the Public URL you are setting for the application is not in FQDN format, so this may not be related to your hosts configuration. I would suggest double checking that the format you are setting for the Public URL is correct, and feel free to update us here on what you are trying to set the Public URL to so we can confirm.
If you can rule that out, I would move on to checking the IdP configuration in OAG. OAG needs a valid API token with correct permissions in order to push the application to the Okta tenant. If the token has expired or been revoked, this may cause similar issues. I would suggest going to the "Settings > Identity Providers" tab within the OAG Admin Console to verify that the IdP is in a Valid status. If it is not currently in Valid status, you can refer to the following documentation on how to configure the IdP in OAG: https://help.okta.com/oag/en-us/content/topics/access-gateway/configure-idp-okta.htm
If the Public URL is being properly set in FQDN format and you do have a valid IdP configuration, please let us know and we'll continue to assist!
Thank you,
Naveen at Okta
Thank you for the response Naveen. Whatever you have suggested I tried all and everything looks fine from the configuration point of view.
Can you please confirm whether I can use the host name "https://header.domain.tld" as a public domain for header based application?
Note : I have added the host name "header.domain.tld" as alias to the IP address of admin UI IP address.