Can you ensure that Interaction Code has been enabled for your Org, Application, and (if you’re using one), Custom Authorization Server’s Access Rule, as in the solution here: You are not allowed to access this app. okta-angular-oie-sample-quickstart - #2 by martin.b