Thanks for the reply. We ended up making seperate login pages for each and adding that to Okta Application config for each SPA. We have a custom domain, but we couldn’t figure out how to make any useful API calls. Since we only wanted group membership, we just ended up passing those back in the claim. The final missing link was that the JWT is POSTed from the tile you click on in the Okta home tab. Once we decoded / validated that on the client side, it all worked.
1 Like