We had a number of testers conducting UAT yesterday report this CORS error:
The API call is client-side to an Okta workflow endpoint. The workflow creates a user and assigns them to group(s), and sends 2 emails.
The “from origin” url is in the Trusted Origins list under Security, and most of the time it just works. I have only seen this issue once, and I cannot get it to replay - but there are multiple reports from testers. In all cases so far, the workflow executed successfully - regardless of the error.
Has anybody else seen this happen?