0D5WR00001f6vsN0AQOkta Classic EngineLifecycle ManagementAnswered2026-05-26T21:40:38.000Z2026-05-17T20:11:09.000Z2026-05-26T21:40:38.000Z

MASRURA.96958 (Customer) asked a question.

May 17, 2026 at 8:11 PM
Salesforce.com SCIM Provisioning - OAuth popup returns about:blank in Okta Preview org

Environment:

- IdP: Okta Preview org (wfpp-ec4b5.oktapreview.com)

- SP: Salesforce Developer Edition

 

Problem:

When enabling SCIM provisioning on the Salesforce.com app in Okta, clicking "Authenticate with Salesforce.com" opens a popup that shows about:blank and immediately closes without loading a Salesforce login page. This results in the error: "Could not verify the Salesforce administrator credentials."

 

What was tried:

- Verified API Enabled on System Administrator profile

- Removed IP restrictions in Salesforce Network Access

- Created a custom Connected App with correct OAuth scopes and callback URL

- Relaxed IP restrictions on the Connected App

- Enabled "Allow OAuth Username-Password Flows" and "Allow Authorization Code and Credentials Flows"

- Changed Instance Type from Sandbox to Production in Okta

- Added Custom Domain in Okta General settings

- Tested in both Edge and Chrome

- Installed orgfarm_app_1 (Okta's built-in connected app) in Salesforce

 

Note: The UI shows a green "API is authenticated" banner simultaneously with the red error, suggesting a state conflict.

 

Suspected cause: Compatibility issue between Okta preview org and Salesforce Developer Edition OAuth popup flow.

  • 3 answers
  • 171 views

  • Paul S. (Okta, Inc.)

    Hello @MASRURA.96958 (Customer)​ Thank you for posting on our Community page!

     

    The issue could be this:

    "If a Sandbox environment is used in Salesforce, please navigate to the SAML Identity Type and change it from "Assertion contains the Federation ID from the User object" to "Assertion contains the User's Salesforce username".

    After the process is completed, please re-authenticate the API Credentials. "

     

    I would recommend reviewing out troubleshooting guide below which provide additional steps:

    https://support.okta.com/help/s/article/salesforce-provisioning-integration-error-could-not-verify-the-salesforce-administrator-credentials-please-confirm-that-these-are-set-correctly?language=en_US

     

    Thank you for reaching out to our Community and have a great day!

    --

    Help others in the community by liking or hitting Select as Best if this response helped you.

    Expand Post
    Selected as Best

  • MASRURA.96958 (Customer)

    Hi Paul, thank you for your response. I followed the steps from the support article and wanted to update you on what I found:

    • PKCE was already disabled on the Connected App
    • SAML Identity Type was already set to 'Assertion contains the User's Salesforce username'
    • OAuth Consumer Key and Secret have been verified and refreshed
    • Instance Type is set to Production in Okta

    Despite all of this, I'm still getting 'Could not verify the Salesforce administrator credentials' on both my Okta preview org and my Okta trial org (wgu-trial-2252077.okta.com).

    I also tested the credentials directly via Postman using both password and client_credentials grant types, and both returned invalid_client_id — which suggests the issue may be on the Salesforce Developer Edition side rather than Okta.

    Is there a known compatibility issue between Okta SCIM provisioning and Salesforce Developer Edition orgs? Any additional guidance would be appreciated.

    Expand Post

    • Paul S. (Okta, Inc.)

      Hello @MASRURA.96958 (Customer)​ In the past I was able to enable Provisioning from a Salesforce developer account, however if they changed anything I can't say for sure. I would recommend to check with them if there are any restrictions.

Recommended content

No recommended content found...