OK I now understand that Okta expects the nonce to match the one given initially in the /auth endpoint.
2 Likes
OK I now understand that Okta expects the nonce to match the one given initially in the /auth endpoint.