403 Error in Idp-initiated login with OIDC

I have an “OpenID Connect” application in okta. The type of the application is Single Page App(SPA).

When I tried to login this application from Okta (xxx.okta.com), I got 403 error.

Hi @shaoliang

Can you please check in your Okta tenant under Admin >> Applications >> your OIDC application >> General tab that you have Login Initiated By set to Either Okta or App?

I am configuring the Okta app using Terraform. I only see one attributes regarding this feature, which is “login_uri”. However, seems configuring “login_uri” does not work.