okta-angular icon indicating copy to clipboard operation
okta-angular copied to clipboard

Okta Angular can't create a new session when in incognito mode

Open ghost opened this issue 4 years ago • 5 comments

Everything works normally but I can't create SSO session when using incognito mode. Can anyone tell me why and how could I solve it?

I'm using the latest version of okta-angular and okta-signin-widget

ghost avatar Jan 15 '21 01:01 ghost

Thanks for reaching out @thuannh1027

A small clarification - are you having multiple apps under the same domain which fail to provide SSO experience when running incognito? (i.e. what are the symptoms of SSO session not being created).

@thuannh1027 A couple questions

  • what OS / browser are you using?
  • are you able to login directly at your org's Okta url?

aarongranick-okta avatar Jan 15 '21 17:01 aarongranick-okta

Thanks for reaching out @thuannh1027

A small clarification - are you having multiple apps under the same domain which fail to provide SSO experience when running incognito? (i.e. what are the symptoms of SSO session not being created).

I have a Salesforce app and an Angular app. Both are using Okta as an identity provider. Without incognito mode, after login successfully, I could use /session/me to check the session and also redirect to Salesforce app by embedded link.

However, in incognito mode, when trying hit /session/me, it returns 404 and I cant redirect to Salesforce app. I did receive tokens from Okta but not sessionToken

ghost avatar Jan 15 '21 17:01 ghost

Thanks for the details.

This might be happening b/c of cookie policy setting: Screenshot 2021-01-18 at 10 38 02

If that is the case, session cookie 'sid' is not set for Okta tenant domain (see KB post for similar issue in IE11).

@thuannh1027 Does @oleksandrpravosudko-okta 's comment help?

shuowu avatar Jun 16 '21 21:06 shuowu