Issue:

When configuring OKTA with Console I receive the following error:

Error "400 Bad Request" - The redirect_uri Parameter Must Be a Login Redirect URI in the Client App Settings

Solution:

1. Validate you have followed our OKTA Configuration documentation

2. Confirm the redirect URI you have set in the OKTA portal matches what we suggest in our documentation (Note: OKTA is case sensitive, make sure it matches exactly):

http(s)://<Console host>(:<Console port>)/oauth/callback/<OAuth2 config name>

3. Confirm if you are using AWS Fargate or a Proxy server.  If you are using either of these, you will need to set the following property on Console to match the URI that you use to access Console:

Environment Variable:

CDK_PLATFORM_EXTERNAL_URL='http(s)://<Console host>(:<Console port>)

YAML Configuration:

platform.external.url: http(s)://<Console host>(:<Console port>)