Okta Authentication using http (not https) in a webforms .net web application

[warren]

You can try out this sample app GitHub - oktadev/okta-aspnet-webforms-example: An example of how to integrate Okta for authentication in an ASP.NET Webforms application.

However, I believe the change to use HTTPS is due to the SameSite cookie changes back in 2020.
https://support.okta.com/help/s/article/FAQ-How-Chrome-80-Update-for-SameSite-by-default-Potentially-Impacts-Your-Okta-Environment

You can refer to this post as well.

Okta.AspNet SameSite issue

Hi @marcin @jharris, I would like to add this is caused by the new security implementation launched in version 80. If enabled, cookies without SameSite restrictions must also be Secure. If a cookie without SameSite restrictions is set without the Secure attribute, it will be rejected. For the cookies to be set with ‘secure’ attribute, you have to make sure the communication is https and not http. I suggest you to check the configuration in your application and environment(proxy, load balancer…