From 4636e3c84f5483eba1b7aeeb648ec45a10a8c0a9 Mon Sep 17 00:00:00 2001 From: Nick Acosta Date: Fri, 10 Oct 2025 14:06:14 -0700 Subject: [PATCH 1/2] adding okta troubleshooting guide to docs --- .../security/okta/.auth-code-flow.md.swp | Bin 0 -> 16384 bytes .../security/okta/troubleshooting.md | 28 ++++++++++++++++++ .../security/okta/troubleshooting.md | 28 ++++++++++++++++++ .../security/okta/troubleshooting.md | 28 ++++++++++++++++++ 4 files changed, 84 insertions(+) create mode 100644 content/v1.10.x/deployment/security/okta/.auth-code-flow.md.swp create mode 100644 content/v1.10.x/deployment/security/okta/troubleshooting.md create mode 100644 content/v1.11.x-SNAPSHOT/deployment/security/okta/troubleshooting.md create mode 100644 content/v1.9.x/deployment/security/okta/troubleshooting.md diff --git a/content/v1.10.x/deployment/security/okta/.auth-code-flow.md.swp b/content/v1.10.x/deployment/security/okta/.auth-code-flow.md.swp new file mode 100644 index 0000000000000000000000000000000000000000..d057c56d516007c26f18c0a6ca4dc253f373832a GIT binary patch literal 16384 zcmeI3TZklQ6~`;_l6c8#^db88WtOnJ#Z>ps#+coKjhVe>h`SSZW(^5QQr-1+cV()p zI#ty(8DkW@Bq%}<6O@QP_@EGc5Wz?BK@fy!@JWp~FrefuCXk@4iNEuGRo&G+JsY;O zf=CVgnc1rPF6VzP-#MphTZccjdQKf{EIIsq&~aYce5rTSg+DoW-RU@S*xvNpNtXL^ zbMK#XetYkml{=psPuM)Av&}piG=rp_d0R`(b`s}0&YN3HjitklN1A~iM9EHHE@iqs zOv8MqnQZ2M(;wzNubl+i>qNYpk|Qr64 z@JW^RlI=_l2g=XXsh!yGhi%o`QGxFG!zgd4lRZD~YL!op$`iH5ClF=^KMqvpZ`o(s z=JBlIIFH_`%%T-pH#FXKJ@U+hZUJlw{+@t(xmSVQoZG6xgInI zad$!aQGR^ktsY%a&08LG*5bC^*a{zOBx(2=KM#{wt((bJ520IH$I1@^9W1KY-wL~a z&WMCZ?6)53jyu%KJ*(!|j5#tT@|(>lCKjG#`{Sjo9IBmaCJt0+pAm_|WSA)el5w7#AK!3aZeLam>YZpn+>5w2TI z#GPV|Id^ImU4DAw`Gc^s+ub+I9iJ3a5|y~_NR^&ZB|9p#5a~`{DqYNC;Kw>@IIFn| zGnMLg(&w`uEJN(UDp2`IGw@R}l9_t$B&iC*PDiJFFr@s!fNdC?%Nj~tZ|0y_>p%=i zvDzRB<9tzV_riAXKonu0Q_j~AYuT?(Sr1jS)S(W>Nj@RKA!nn9Oxqzdc6F?c0FzEV zug~H;6CNwEz$@dx*k3RASgA8q#bB`|m@21mJaum`jJO~!6vo{>oorDk6ax)Hjo&j* zf0*UM;2=%5LQ$lsM!(x{|-UX(8PTo>CB?X8|-ilk!)urPZVNJOh>m3w}!wuvK! zgE!O#jq=TySU-|mx4vC0C`zydtIg2@4Wv8G_hu=Eb>8nYH_?PI(%NY_kVrMJQmkK; zoR6Z>Zg;=@gQa5TaQ~Gcm}#3(+8XBh+ZC;j2jvl7#DnvCdnVs%e7GE0R(okh?6a$L zW47b$V9tmwUq{-IV7`vLwQ-~pv2h+R%=m6H?u6Z8ssn3da~)#47Fv4ig*+RE2Lo~U zIN4U?oy_ZOQ`@LYYh!JM-{lgzklSQ95+h6BA{KB^m7%ZUDCLrTM7nLYk?MzsAvCGP z1OyYoh){f_nkG@ib-&%#83(W#Xk&?uVki7elcBB7y0;#7V=o!XArUY;YmFY1^?P|f zSZ+2YVnsbZyInqd+tJ&a8BsXSJ+4J9zrD$Vdp}!w$SoqA-IZCH^LO^buDjZoBQwm^ z!QM_Q4TD1j46jOv<$+M0kO=bOEn!-1B%6}O5j$558^wj~Fz=Ct787<;pP-)a4789e zTX$W8b*i(Tecr5erZ^$e;!bX+Zs{JmVUjK?cD6e?$j16A)Wq%%Tu5@8Oq$JgB+6@Y z+8s5_^nvjnCQtB_d{A5{vtk7ube(L=;RkiDdv+v>>nlKsuyil>?qLDsZ-dhEO>%CjlkD5L2Ev`^*mPYv8Rf4< z&gzjfaJY{%Dx*q8PIs?vsmgUb)=a*W43(eiGT*~*Od8H%8xt9xwJpSU+mKmSoP>%jAagMXrWVsn$way)15T4+x2MFH zNj!O0>~zbI!oV7i_*37Ja`r?gJa-2@B(%I6F_SJpHbsK366oIU?2DmHU5*} zBKSLX{@=ha!Pmk4;05aZhd>BCaEV&~X%K)nsPq2~E`c9_?}M*^E$|>%1r6{feSqh{ zPr&!U*T4?A9~=NL(+~JP_yzb8cm_NQ?gBT0f6*uSBlrV&0sIs^3!Vaxfj&454uTtj zaQe#C? z={W55|27uNNm@x19A8+wdt+t6j0*`>#~028D`}c+pTH^XWt=uik1r7YBb|GP|(~Q4V_}6 zGG|#eSIOyw`2*A@v`nsmo6G3&a^jtkz%3yox?=HK4E6dlbV|I+oU_Es@+9RH{O`+V z6XnQ;$qjI$7DGn5Jrz zhYSaVdRy(bixbkGDiqYle8>K|JZ}@rCeviFxn~ZqO7=f}tIRnzOo3mP{2cj3(Vv;( z+cp5m$Zh#AIf&$gWTmEK>bhhpwjpZzal%5`G(FfN-6l(y%=Y1-rtc6Wa(Esp6L$iZ zJWp0pbWT~^CX2ERYua|zX{0HV{K>pyl;_&~W;DP~DrvP^i`tr&hGfe|PM4pOABk(zY3bOU%IVG6iBjmI zWHiNophigx$vjnQAZ-}p3%yEO#omj)oHYR*`z#goZZX%3hZcQXH$cItRP5J?+MGDT@*ACVbG-FH?IM=Jw?Wc#wxB$=`n zTg1MCN{0RMW!isqQ)Sm@L=7^KG(Hd&vb8zQSz2T1FwzwZE-#hLjXZ2rHe6tUco_W6 zFf!?_*usLk(mol+8R@Or@*qKRJ3>)e(bFpADOj;`7Y#%Vj-vG;Xvpg&V-w%Zxms^Ru(c1T6r6oH;?pX}cH%=@K071I!{o8Fsk zJltc{Y|8EPmA6UO+Kc9dc_u{j8-8nCn9q1mQP#vo$Q+S1`y~uhjq1|dY^!hA#*EIz z?B;YE`dHrR4N*Ixl~RpDQ};@?XflYg`uKbK)?!`8O0b;o?Ug7en_7N!tz33WNyU;F z*s6_lG=6x+DMylNeT?5-S!J2$ix*pSZWE*CbtY=7z96YEHuHYD{i+)jlq(~%J>9Q@ kxm2R;$LJ`Ot&s^G%`3Udl4$fwm)aYqQB~^cdsgEA0LSb)`~Uy| literal 0 HcmV?d00001 diff --git a/content/v1.10.x/deployment/security/okta/troubleshooting.md b/content/v1.10.x/deployment/security/okta/troubleshooting.md new file mode 100644 index 000000000..2f20e35b8 --- /dev/null +++ b/content/v1.10.x/deployment/security/okta/troubleshooting.md @@ -0,0 +1,28 @@ +--- +title: Fix Timeout When Using Okta SSO +description: Learn how to resolve errors in OpenMetadata when using Okta, including a spinning wheel timeout with Okta redirects +slug: /deployment/security/okta/troubleshooting +collate: false +--- + +# FAQ: Security with Okta + +## How to resolve spinnging timeout error when connecting to OpenMetadata with Okta SSO? + +If you're using Okta to authenticate OpenMetadata with SSO, it may redirect to a blank screen with a spinning wheel, indicating a redirect issue. + +### Resolution + +To allow Okta to authenticate and redirect to OpenMetadata properly: + +1. Ensure your callback URLs are pointing to OpenMetadata that Okta can reach. [Our guide](/deployment/security/okta/auth-code-flow) uses `localhost:8585` if you are not hosting OpenMetadata locally, you will need to update your sign-in redirect URIs, and possibly your sign-out redict URIs and base URIs if you have set those. +2. Keep only the callback URLs that OpenMetadata actually uses: + +``` +redirect_uris = [ + "http://localhost:8585/callback", + "http://localhost:8585/silent-callback" # Only if needed for silent refresh +] +``` + +OpenMetadata isn't configured to handle additional endpoints, so the frontend will spin indefinitely. diff --git a/content/v1.11.x-SNAPSHOT/deployment/security/okta/troubleshooting.md b/content/v1.11.x-SNAPSHOT/deployment/security/okta/troubleshooting.md new file mode 100644 index 000000000..2f20e35b8 --- /dev/null +++ b/content/v1.11.x-SNAPSHOT/deployment/security/okta/troubleshooting.md @@ -0,0 +1,28 @@ +--- +title: Fix Timeout When Using Okta SSO +description: Learn how to resolve errors in OpenMetadata when using Okta, including a spinning wheel timeout with Okta redirects +slug: /deployment/security/okta/troubleshooting +collate: false +--- + +# FAQ: Security with Okta + +## How to resolve spinnging timeout error when connecting to OpenMetadata with Okta SSO? + +If you're using Okta to authenticate OpenMetadata with SSO, it may redirect to a blank screen with a spinning wheel, indicating a redirect issue. + +### Resolution + +To allow Okta to authenticate and redirect to OpenMetadata properly: + +1. Ensure your callback URLs are pointing to OpenMetadata that Okta can reach. [Our guide](/deployment/security/okta/auth-code-flow) uses `localhost:8585` if you are not hosting OpenMetadata locally, you will need to update your sign-in redirect URIs, and possibly your sign-out redict URIs and base URIs if you have set those. +2. Keep only the callback URLs that OpenMetadata actually uses: + +``` +redirect_uris = [ + "http://localhost:8585/callback", + "http://localhost:8585/silent-callback" # Only if needed for silent refresh +] +``` + +OpenMetadata isn't configured to handle additional endpoints, so the frontend will spin indefinitely. diff --git a/content/v1.9.x/deployment/security/okta/troubleshooting.md b/content/v1.9.x/deployment/security/okta/troubleshooting.md new file mode 100644 index 000000000..2f20e35b8 --- /dev/null +++ b/content/v1.9.x/deployment/security/okta/troubleshooting.md @@ -0,0 +1,28 @@ +--- +title: Fix Timeout When Using Okta SSO +description: Learn how to resolve errors in OpenMetadata when using Okta, including a spinning wheel timeout with Okta redirects +slug: /deployment/security/okta/troubleshooting +collate: false +--- + +# FAQ: Security with Okta + +## How to resolve spinnging timeout error when connecting to OpenMetadata with Okta SSO? + +If you're using Okta to authenticate OpenMetadata with SSO, it may redirect to a blank screen with a spinning wheel, indicating a redirect issue. + +### Resolution + +To allow Okta to authenticate and redirect to OpenMetadata properly: + +1. Ensure your callback URLs are pointing to OpenMetadata that Okta can reach. [Our guide](/deployment/security/okta/auth-code-flow) uses `localhost:8585` if you are not hosting OpenMetadata locally, you will need to update your sign-in redirect URIs, and possibly your sign-out redict URIs and base URIs if you have set those. +2. Keep only the callback URLs that OpenMetadata actually uses: + +``` +redirect_uris = [ + "http://localhost:8585/callback", + "http://localhost:8585/silent-callback" # Only if needed for silent refresh +] +``` + +OpenMetadata isn't configured to handle additional endpoints, so the frontend will spin indefinitely. From cdc8da39ef2b47fae0dce490881b6c86734e14e3 Mon Sep 17 00:00:00 2001 From: Nick Acosta Date: Fri, 10 Oct 2025 14:08:04 -0700 Subject: [PATCH 2/2] updating okta troubleshooting guide to docs --- .../security/okta/.auth-code-flow.md.swp | Bin 16384 -> 0 bytes 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 content/v1.10.x/deployment/security/okta/.auth-code-flow.md.swp diff --git a/content/v1.10.x/deployment/security/okta/.auth-code-flow.md.swp b/content/v1.10.x/deployment/security/okta/.auth-code-flow.md.swp deleted file mode 100644 index d057c56d516007c26f18c0a6ca4dc253f373832a..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 16384 zcmeI3TZklQ6~`;_l6c8#^db88WtOnJ#Z>ps#+coKjhVe>h`SSZW(^5QQr-1+cV()p zI#ty(8DkW@Bq%}<6O@QP_@EGc5Wz?BK@fy!@JWp~FrefuCXk@4iNEuGRo&G+JsY;O zf=CVgnc1rPF6VzP-#MphTZccjdQKf{EIIsq&~aYce5rTSg+DoW-RU@S*xvNpNtXL^ zbMK#XetYkml{=psPuM)Av&}piG=rp_d0R`(b`s}0&YN3HjitklN1A~iM9EHHE@iqs zOv8MqnQZ2M(;wzNubl+i>qNYpk|Qr64 z@JW^RlI=_l2g=XXsh!yGhi%o`QGxFG!zgd4lRZD~YL!op$`iH5ClF=^KMqvpZ`o(s z=JBlIIFH_`%%T-pH#FXKJ@U+hZUJlw{+@t(xmSVQoZG6xgInI zad$!aQGR^ktsY%a&08LG*5bC^*a{zOBx(2=KM#{wt((bJ520IH$I1@^9W1KY-wL~a z&WMCZ?6)53jyu%KJ*(!|j5#tT@|(>lCKjG#`{Sjo9IBmaCJt0+pAm_|WSA)el5w7#AK!3aZeLam>YZpn+>5w2TI z#GPV|Id^ImU4DAw`Gc^s+ub+I9iJ3a5|y~_NR^&ZB|9p#5a~`{DqYNC;Kw>@IIFn| zGnMLg(&w`uEJN(UDp2`IGw@R}l9_t$B&iC*PDiJFFr@s!fNdC?%Nj~tZ|0y_>p%=i zvDzRB<9tzV_riAXKonu0Q_j~AYuT?(Sr1jS)S(W>Nj@RKA!nn9Oxqzdc6F?c0FzEV zug~H;6CNwEz$@dx*k3RASgA8q#bB`|m@21mJaum`jJO~!6vo{>oorDk6ax)Hjo&j* zf0*UM;2=%5LQ$lsM!(x{|-UX(8PTo>CB?X8|-ilk!)urPZVNJOh>m3w}!wuvK! zgE!O#jq=TySU-|mx4vC0C`zydtIg2@4Wv8G_hu=Eb>8nYH_?PI(%NY_kVrMJQmkK; zoR6Z>Zg;=@gQa5TaQ~Gcm}#3(+8XBh+ZC;j2jvl7#DnvCdnVs%e7GE0R(okh?6a$L zW47b$V9tmwUq{-IV7`vLwQ-~pv2h+R%=m6H?u6Z8ssn3da~)#47Fv4ig*+RE2Lo~U zIN4U?oy_ZOQ`@LYYh!JM-{lgzklSQ95+h6BA{KB^m7%ZUDCLrTM7nLYk?MzsAvCGP z1OyYoh){f_nkG@ib-&%#83(W#Xk&?uVki7elcBB7y0;#7V=o!XArUY;YmFY1^?P|f zSZ+2YVnsbZyInqd+tJ&a8BsXSJ+4J9zrD$Vdp}!w$SoqA-IZCH^LO^buDjZoBQwm^ z!QM_Q4TD1j46jOv<$+M0kO=bOEn!-1B%6}O5j$558^wj~Fz=Ct787<;pP-)a4789e zTX$W8b*i(Tecr5erZ^$e;!bX+Zs{JmVUjK?cD6e?$j16A)Wq%%Tu5@8Oq$JgB+6@Y z+8s5_^nvjnCQtB_d{A5{vtk7ube(L=;RkiDdv+v>>nlKsuyil>?qLDsZ-dhEO>%CjlkD5L2Ev`^*mPYv8Rf4< z&gzjfaJY{%Dx*q8PIs?vsmgUb)=a*W43(eiGT*~*Od8H%8xt9xwJpSU+mKmSoP>%jAagMXrWVsn$way)15T4+x2MFH zNj!O0>~zbI!oV7i_*37Ja`r?gJa-2@B(%I6F_SJpHbsK366oIU?2DmHU5*} zBKSLX{@=ha!Pmk4;05aZhd>BCaEV&~X%K)nsPq2~E`c9_?}M*^E$|>%1r6{feSqh{ zPr&!U*T4?A9~=NL(+~JP_yzb8cm_NQ?gBT0f6*uSBlrV&0sIs^3!Vaxfj&454uTtj zaQe#C? z={W55|27uNNm@x19A8+wdt+t6j0*`>#~028D`}c+pTH^XWt=uik1r7YBb|GP|(~Q4V_}6 zGG|#eSIOyw`2*A@v`nsmo6G3&a^jtkz%3yox?=HK4E6dlbV|I+oU_Es@+9RH{O`+V z6XnQ;$qjI$7DGn5Jrz zhYSaVdRy(bixbkGDiqYle8>K|JZ}@rCeviFxn~ZqO7=f}tIRnzOo3mP{2cj3(Vv;( z+cp5m$Zh#AIf&$gWTmEK>bhhpwjpZzal%5`G(FfN-6l(y%=Y1-rtc6Wa(Esp6L$iZ zJWp0pbWT~^CX2ERYua|zX{0HV{K>pyl;_&~W;DP~DrvP^i`tr&hGfe|PM4pOABk(zY3bOU%IVG6iBjmI zWHiNophigx$vjnQAZ-}p3%yEO#omj)oHYR*`z#goZZX%3hZcQXH$cItRP5J?+MGDT@*ACVbG-FH?IM=Jw?Wc#wxB$=`n zTg1MCN{0RMW!isqQ)Sm@L=7^KG(Hd&vb8zQSz2T1FwzwZE-#hLjXZ2rHe6tUco_W6 zFf!?_*usLk(mol+8R@Or@*qKRJ3>)e(bFpADOj;`7Y#%Vj-vG;Xvpg&V-w%Zxms^Ru(c1T6r6oH;?pX}cH%=@K071I!{o8Fsk zJltc{Y|8EPmA6UO+Kc9dc_u{j8-8nCn9q1mQP#vo$Q+S1`y~uhjq1|dY^!hA#*EIz z?B;YE`dHrR4N*Ixl~RpDQ};@?XflYg`uKbK)?!`8O0b;o?Ug7en_7N!tz33WNyU;F z*s6_lG=6x+DMylNeT?5-S!J2$ix*pSZWE*CbtY=7z96YEHuHYD{i+)jlq(~%J>9Q@ kxm2R;$LJ`Ot&s^G%`3Udl4$fwm)aYqQB~^cdsgEA0LSb)`~Uy|