Yes application works correctly, but for and App Embed Link (tile) ‘iss’ works differently.
Cases:
- If a user authenticated in Okta and runs the app first time on this machine => no ‘iss’
- If a user authenticated in Okta and runs the app second time => ‘iss’ exists
I believe, when the browser does not know about the app (does not have okta tokens for the app cookes/local storage and etc) => it runs restoreOriginalUri and during redirectings (including redirect to login/callback ) ‘iss’ disappears.
All other times when browser knows about the app ( have okta tokens for the app cookes/local storage and etc) restoreOriginalUri will not be launched => ‘iss’ persists.