Have you tested in other browsers? Are only browsers that are blocking 3rd party cookies affected (e.g. Chrome Incognito and Safari with their default settings). After you enabled refresh tokens on the Okta admin console, did you also request the offline_access scope in your oktaAuth config?