I am an OKTA newbie. I am trying to run the simplest use case for a Spring Boot web app accessed using OKTA. I downloaded the sample: Okta Spring Security & Okta-Hosted Login Page Example. https://github.com/okta/samples-java-spring/tree/master/okta-hosted-login I followed the instruction for cr…

Hmm, do you happen to have an Authorization Policies assigned to this app that is denying access to these users?

[image] andrea: mm, do you happen to have an Authorization Policies assigned to this app that is denying access to these users? Thank you for your help. In my Application Integration, under the Assignments tab, I have: This app is implicitly assigned to users Immediate access is currently …

you could try using the “Access Testing Tool” under the reports tab, select the app and choose a user and see what it generates in the results if you haven’t already tried that.

If you look at the application’s Sign On (in some orgs, its labelled Authentication) tab, you should see a section at the bottom showing which Authentication Policy is assigned (I misspoke earlier when I referred to them as Authorization Policies, this is what happens when you type too fast!). Make…

I used the Access Testing Tool. When I select Run Test, it shows that the user has access to the app. As I understand it, it does not tell me anything about a user using OIDC trying to access the app. I am still running the sample okta-hosted-login app from OKTA The web page has a ‘Login’ button…

I have the correct Authentication Policy. I can tell because I changed it from MFA to just password and the OKTA authenticate page responded accordingly. I did this to verify I had the correct Authentication policy. Thank you for any help you can give me.

Any chance you are using a Custom Auth Server, and it doesn’t have an Access Policy Rule set up? I would also suggest that you check the logs in the Okta Admin console, which will give you more insights into that error.

If I understand correctly, I set the Custom Authorization Server in App’s Sign-on settings. I have attached a screen shot of my App’s Sign-on settings. I did not set a custom auth server. I looked at the logs in the admin console. I have inclued the info from the screen below. The log CSV is hug…

The no_matching_policy can either be due to this - Okta Help Center (Lightning) or this - [image] Web sign in failed because no_matching_policy OAuth/OIDC I created an okta application for test Add person and assign to application Run WebSignIn sample in okta-…

I created an access policy and was able to successfully run the application. As I said, I was following the instructions in the beginner’s example listed below. Why didn’t the instructions include the important information that you needed an access policy since an AP is required. I wasted many ho…

“You are not allowed to access this app” returned even though everyone has access to OIDC App

Questions OAuth/OIDC

vk-giri December 20, 2025, 10:53pm 10

The no_matching_policy can either be due to this - Okta Help Center (Lightning)

or this -

1 Like

Post		Replies	Views
Not allowd to access the application even though access has been provided OAuth/OIDC	3	277	May 22, 2025
Okta Identity Engine okta-idx-swift sample app Questions	3	4280	July 11, 2022
Okta Login Error OAuth/OIDC	2	1305	August 21, 2024
Failure-redirect after okta sign in click OAuth/OIDC reactjs , idx	4	551	September 21, 2024
400 access_denied OAuth/OIDC	2	170	October 2, 2024

“You are not allowed to access this app” returned even though everyone has access to OIDC App

Related topics