# \#idx **URL:** https://devforum.okta.com/tag/idx/44.md [Latest](https://devforum.okta.com/latest.md) · [Categories](https://devforum.okta.com/categories.md) · [Tags](https://devforum.okta.com/tags.md) --- ## [Migrating from Okta Classic to Identity Engine — How to verify admin-initiated reset password token using Identity SDK?](https://devforum.okta.com/t/migrating-from-okta-classic-to-identity-engine-how-to-verify-admin-initiated-reset-password-token-using-identity-sdk/35035)
**Author:** [@jgrooms](https://devforum.okta.com/u/jgrooms)\ **Replies:** 2\ **Last updated:** [February 11, 2026, 7:27pm UTC](https://devforum.okta.com/t/migrating-from-okta-classic-to-identity-engine-how-to-verify-admin-initiated-reset-password-token-using-identity-sdk/35035 "2026-02-11T19:27:50Z")
Hey, we’re migrating from Okta Classic to Okta Identity Engine and are using the Okta SDK in our backend. This is an admin-initiated user lifecycle password reset (not self-service). We call reset password with sendEmai… --- ## [Trust this device for 14 days](https://devforum.okta.com/t/trust-this-device-for-14-days/34467)
**Author:** [@jchabot86](https://devforum.okta.com/u/jchabot86)\ **Replies:** 0\ **Last updated:** [October 9, 2025, 3:37pm UTC](https://devforum.okta.com/t/trust-this-device-for-14-days/34467 "2025-10-09T15:37:04Z")
In order to avoid our customer’s from having to use MFA every time they log in, we want to be able to have them click “trust this device for 14 days” when they sign in. Subsequent logins will only require username/passw… --- ## [API Endpoint Description for Interaction Code Grant Type](https://devforum.okta.com/t/api-endpoint-description-for-interaction-code-grant-type/34315)
**Author:** [@Albertina](https://devforum.okta.com/u/Albertina)\ **Replies:** 1\ **Last updated:** [September 15, 2025, 7:10am UTC](https://devforum.okta.com/t/api-endpoint-description-for-interaction-code-grant-type/34315 "2025-09-15T07:10:05Z")
Hello, I am currently implementing the interaction code grant type as detailed in the documentation here: https://developer.okta.com/docs/guides/implement-grant-type/interactioncode/main/ I am looking for the specific … --- ## [Passwordless Login using IDX flow](https://devforum.okta.com/t/passwordless-login-using-idx-flow/33089)
**Author:** [@mehul712](https://devforum.okta.com/u/mehul712)\ **Replies:** 2\ **Last updated:** [May 30, 2025, 9:45am UTC](https://devforum.okta.com/t/passwordless-login-using-idx-flow/33089 "2025-05-30T09:45:44Z")
BACKGROUND - Using the below steps to initiate OTP, I get the email and when I submit the OTP, I get the tokens in the last step. await authClient.idx.authenticate({ username: “user\_email@xyz.com”, authenticator: Aut… --- ## [Email Authenticator for MFA not sending an email using the embedded SDK](https://devforum.okta.com/t/email-authenticator-for-mfa-not-sending-an-email-using-the-embedded-sdk/33095)
**Author:** [@ups\_braican](https://devforum.okta.com/u/ups_braican)\ **Replies:** 0\ **Last updated:** [May 8, 2025, 7:53pm UTC](https://devforum.okta.com/t/email-authenticator-for-mfa-not-sending-an-email-using-the-embedded-sdk/33095 "2025-05-08T19:53:37Z")
I’m building authentication into my Next.js (v15) app using the Okta embedded SDK, using the IDX API. I’m struggling with getting the SDK to fire the email challenge when the Okta Email Authenticator factor is chosen as … --- ## [Okta idx keep me signed in / device remember customization](https://devforum.okta.com/t/okta-idx-keep-me-signed-in-device-remember-customization/32963)
**Author:** [@ssmith59](https://devforum.okta.com/u/ssmith59)\ **Replies:** 1\ **Last updated:** [April 29, 2025, 7:48am UTC](https://devforum.okta.com/t/okta-idx-keep-me-signed-in-device-remember-customization/32963 "2025-04-29T07:48:57Z")
Is it possible to customize the remember me / keep me signed in with the idx flow? Let’s say we want to customize the experience and prompt users when verifying their authenticator. Is it possible to call some okta APIs… --- ## [localizationKey is null for identify step missing username/password](https://devforum.okta.com/t/localizationkey-is-null-for-identify-step-missing-username-password/32790)
**Author:** [@ssmith59](https://devforum.okta.com/u/ssmith59)\ **Replies:** 1\ **Last updated:** [April 2, 2025, 3:04pm UTC](https://devforum.okta.com/t/localizationkey-is-null-for-identify-step-missing-username-password/32790 "2025-04-02T15:04:52Z")
For using idx, in the android and swift sdks when there is a form error on the identify step, missing username/password fields, there is not a localization key for those fields. If we wanted to monitor around a unique i… --- ## [How to authenticate a user using cached credentials?](https://devforum.okta.com/t/how-to-authenticate-a-user-using-cached-credentials/29235)
**Author:** [@szaske](https://devforum.okta.com/u/szaske)\ **Replies:** 2\ **Last updated:** [March 21, 2025, 10:04pm UTC](https://devforum.okta.com/t/how-to-authenticate-a-user-using-cached-credentials/29235 "2025-03-21T22:04:32Z")
I’ve got the Okta Identity Engine working with my Android application, but the documentation is severally lacking. The sample (okta-idx-android) shows me how to walk through the InteractionFlow…which is roughly 1. Start… --- ## [Crash on Logout with "cookieJar was already accessed" Error in okta-idx-android 3.0.1](https://devforum.okta.com/t/crash-on-logout-with-cookiejar-was-already-accessed-error-in-okta-idx-android-3-0-1/30949)
**Author:** [@chamikara-tp](https://devforum.okta.com/u/chamikara-tp)\ **Replies:** 1\ **Last updated:** [March 21, 2025, 10:03pm UTC](https://devforum.okta.com/t/crash-on-logout-with-cookiejar-was-already-accessed-error-in-okta-idx-android-3-0-1/30949 "2025-03-21T22:03:21Z")
I’m using the okta-idx-android library version 3.0.1 to manage authentication in my Android app. The initial login flow works without issues, but I’m getting a crash when logging out and attempting to reinitialize the Ok… --- ## [Okta-auth-js Magic Links to enroll Okta Verify](https://devforum.okta.com/t/okta-auth-js-magic-links-to-enroll-okta-verify/31715)
**Author:** [@cstaber](https://devforum.okta.com/u/cstaber)\ **Replies:** 1\ **Last updated:** [February 19, 2025, 2:54pm UTC](https://devforum.okta.com/t/okta-auth-js-magic-links-to-enroll-okta-verify/31715 "2025-02-19T14:54:32Z")
We have our own sign in page that we are hosting that multiple applications will authenticate against using IDX/OIDC. When a user is required to enroll in factors, the SDK returns the list of factors and that is all work… --- ## [OIE idx phone authenticator enrollment causes error on web's use of okta signin widget](https://devforum.okta.com/t/oie-idx-phone-authenticator-enrollment-causes-error-on-webs-use-of-okta-signin-widget/31976)
**Author:** [@ssmith59](https://devforum.okta.com/u/ssmith59)\ **Replies:** 1\ **Last updated:** [February 13, 2025, 10:41pm UTC](https://devforum.okta.com/t/oie-idx-phone-authenticator-enrollment-causes-error-on-webs-use-of-okta-signin-widget/31976 "2025-02-13T22:41:24Z")
I have an interesting issue I encountered. Using OIE and the interaction code grant flow (okta-idx-swift package), I enroll a user in mobile with the phone factor, selecting SMS. ONce this fulfills enrollment, I go to ou… --- ## [Handling Session Expiry and Improving User Experience in Passwordless Authentication Flow with Okta](https://devforum.okta.com/t/handling-session-expiry-and-improving-user-experience-in-passwordless-authentication-flow-with-okta/31664)
**Author:** [@Anugrah\_SR](https://devforum.okta.com/u/Anugrah_SR)\ **Replies:** 1\ **Last updated:** [January 27, 2025, 6:55am UTC](https://devforum.okta.com/t/handling-session-expiry-and-improving-user-experience-in-passwordless-authentication-flow-with-okta/31664 "2025-01-27T06:55:15Z")
We are implementing a passwordless authentication flow without MFA or security questions for both sign-in and sign-up using the Okta Identity Engine, the Okta SDK for Angular (@okta/okta-angular v6.2.0), and Auth JS (@ok… --- ## [How to handle SAML Requests?](https://devforum.okta.com/t/how-to-handle-saml-requests/31713)
**Author:** [@cstaber](https://devforum.okta.com/u/cstaber)\ **Replies:** 0\ **Last updated:** [January 17, 2025, 5:43pm UTC](https://devforum.okta.com/t/how-to-handle-saml-requests/31713 "2025-01-17T17:43:19Z")
To allow for maximum customization, we’re using the okta-auth-js SDK in a page we host to authenticate users from multiple applications we own using IDX/OIDC. This is working great! I pass the query params into the conf… --- ## [SDK IDX Use Okta Verify TOTP?](https://devforum.okta.com/t/sdk-idx-use-okta-verify-totp/31594)
**Author:** [@cstaber](https://devforum.okta.com/u/cstaber)\ **Replies:** 3\ **Last updated:** [January 17, 2025, 3:31pm UTC](https://devforum.okta.com/t/sdk-idx-use-okta-verify-totp/31594 "2025-01-17T15:31:32Z")
What call do I make to tell the SDK I want to use the Okta Verify App TOTP? I thought it’d be: const res = await authClient.idx.proceed({ authenticator: “okta\_verify”, methodType: “totp”, exchangeCodeForTokens: fals… --- ## [Clarification on Resend Code Behavior During Temporary Lock in Passwordless Authentication Flow with Okta](https://devforum.okta.com/t/clarification-on-resend-code-behavior-during-temporary-lock-in-passwordless-authentication-flow-with-okta/31665)
**Author:** [@Anugrah\_SR](https://devforum.okta.com/u/Anugrah_SR)\ **Replies:** 0\ **Last updated:** [January 14, 2025, 2:58pm UTC](https://devforum.okta.com/t/clarification-on-resend-code-behavior-during-temporary-lock-in-passwordless-authentication-flow-with-okta/31665 "2025-01-14T14:58:18Z")
We are implementing a passwordless authentication flow without MFA or security questions for both sign-in and sign-up using the Okta Identity Engine, the Okta SDK for Angular (@okta/okta-angular v6.2.0), and Auth JS (@ok… --- ## [Okta-idx-swift - issue selecting a phone authenticator method](https://devforum.okta.com/t/okta-idx-swift-issue-selecting-a-phone-authenticator-method/31590)
**Author:** [@ssmith59](https://devforum.okta.com/u/ssmith59)\ **Replies:** 1\ **Last updated:** [January 8, 2025, 2:16pm UTC](https://devforum.okta.com/t/okta-idx-swift-issue-selecting-a-phone-authenticator-method/31590 "2025-01-08T14:16:30Z")
I’m working with the okta-idx-swift package and am running into issues selecting a phone factor. I’ve tried the sample code from the example/signin samples folder. here is the sample below: func remediate(context: Au… --- ## [How to replicate okta-hosted widget behavior with the auth-sdk?](https://devforum.okta.com/t/how-to-replicate-okta-hosted-widget-behavior-with-the-auth-sdk/31538)
**Author:** [@cstaber](https://devforum.okta.com/u/cstaber)\ **Replies:** 2\ **Last updated:** [January 3, 2025, 5:09pm UTC](https://devforum.okta.com/t/how-to-replicate-okta-hosted-widget-behavior-with-the-auth-sdk/31538 "2025-01-03T17:09:28Z")
Today in Production we use the okta-hosted widget. We have hundreds of individual apps that redirect to it for user authentication. We need to be able to more fully customize the sign in experience so we’re trying to use… --- ## [Angular 10 signin widget idx override?](https://devforum.okta.com/t/angular-10-signin-widget-idx-override/31082)
**Author:** [@Chompy1](https://devforum.okta.com/u/Chompy1)\ **Replies:** 1\ **Last updated:** [November 2, 2024, 2:17am UTC](https://devforum.okta.com/t/angular-10-signin-widget-idx-override/31082 "2024-11-02T02:17:30Z")
Business has workstations that auto login on startup, an IDX cookie is created from Okta. Angular 10 App uses NPM package @okta/okta-signin-widget/v/4.5.2 and the response token on a successful login contains the auto l… --- ## [Does 'remember this device' work with the okta-idx-dotnet sdk?](https://devforum.okta.com/t/does-remember-this-device-work-with-the-okta-idx-dotnet-sdk/31006)
**Author:** [@slbentley](https://devforum.okta.com/u/slbentley)\ **Replies:** 0\ **Last updated:** [October 22, 2024, 2:43pm UTC](https://devforum.okta.com/t/does-remember-this-device-work-with-the-okta-idx-dotnet-sdk/31006 "2024-10-22T14:43:44Z")
My website has always used the Okta api for all interactions, including authentication. With the API there is the ability to ‘remember this device’ when using MFA. As we transition to new functionality on our website, we… --- ## [Unable to add sign-in widget on SPA for non-developer edition](https://devforum.okta.com/t/unable-to-add-sign-in-widget-on-spa-for-non-developer-edition/30986)
**Author:** [@thomaslu.earthdaily](https://devforum.okta.com/u/thomaslu.earthdaily)\ **Replies:** 3\ **Last updated:** [October 22, 2024, 4:19pm UTC](https://devforum.okta.com/t/unable-to-add-sign-in-widget-on-spa-for-non-developer-edition/30986 "2024-10-22T16:19:07Z")
I had once been able to use the Okta CDN to quickly add the Okta Sign-In Widget to a single-page HTML application, thereby achieving an authentication requirement. This had been done on Okta Classic Engine. Our organiza… --- ## [\[okta-auth-js\]: okta.idx.recoverPassword mostly completes but triggers Push Notification](https://devforum.okta.com/t/okta-auth-js-okta-idx-recoverpassword-mostly-completes-but-triggers-push-notification/30234)
**Author:** [@AdrianP](https://devforum.okta.com/u/AdrianP)\ **Replies:** 0\ **Last updated:** [August 26, 2024, 11:38pm UTC](https://devforum.okta.com/t/okta-auth-js-okta-idx-recoverpassword-mostly-completes-but-triggers-push-notification/30234 "2024-08-26T23:38:08Z")
Hi, I am building a React SPA with Typescript using the okta-auth-js package and I am creating a custom account creation, login, and password recovery pages. In the Admin Console, I have it set so that the following auth… --- ## [Failure-redirect after okta sign in click](https://devforum.okta.com/t/failure-redirect-after-okta-sign-in-click/30150)
**Author:** [@jahnavi310](https://devforum.okta.com/u/jahnavi310)\ **Replies:** 3\ **Last updated:** [August 22, 2024, 3:45am UTC](https://devforum.okta.com/t/failure-redirect-after-okta-sign-in-click/30150 "2024-08-22T03:45:55Z")
I have configured a react SPA app on an okta tenant, the redirect works fine and takes me to the sign in page, but when i click on sign in on the okta sign in page - it show me the following message: “You are not allowe… --- ## [Fetching session token](https://devforum.okta.com/t/fetching-session-token/30108)
**Author:** [@akash007](https://devforum.okta.com/u/akash007)\ **Replies:** 0\ **Last updated:** [August 19, 2024, 12:01pm UTC](https://devforum.okta.com/t/fetching-session-token/30108 "2024-08-19T12:01:11Z")
Im using idx Kotlin SDK : GitHub - okta/okta-idx-android: okta-idx-android for forgot password with email OTP flow and after resetting password getting access token / id token / ID but now i have to login in okta so tha… --- ## [Suspended Status when authenticating with IDX](https://devforum.okta.com/t/suspended-status-when-authenticating-with-idx/30057)
**Author:** [@SF\_Brad](https://devforum.okta.com/u/SF_Brad)\ **Replies:** 0\ **Last updated:** [August 15, 2024, 6:44pm UTC](https://devforum.okta.com/t/suspended-status-when-authenticating-with-idx/30057 "2024-08-15T18:44:24Z")
We have a use case where a consumer is authenticating via Okta SDK with IDX. The user is in a suspended status and when authenticating with UID/PW the response is the same as an incorrect UID/PW. Is there a way to know t… --- ## [Okta AuthJS SDK: Unlock and Recover Password](https://devforum.okta.com/t/okta-authjs-sdk-unlock-and-recover-password/29462)
**Author:** [@jnortonbcbsm](https://devforum.okta.com/u/jnortonbcbsm)\ **Replies:** 0\ **Last updated:** [July 18, 2024, 9:09pm UTC](https://devforum.okta.com/t/okta-authjs-sdk-unlock-and-recover-password/29462 "2024-07-18T21:09:08Z")
Our organization currently uses the Okta AuthJS SDK for authentication using MFA (email/phone). We would like to also use the AuthJS SDK for self-service unlock and recover password. We currently don’t have separate fl… --- ## [Okta-idx-swift failing to self register](https://devforum.okta.com/t/okta-idx-swift-failing-to-self-register/29104)
**Author:** [@aldrin.f.22](https://devforum.okta.com/u/aldrin.f.22)\ **Replies:** 0\ **Last updated:** [July 1, 2024, 3:50pm UTC](https://devforum.okta.com/t/okta-idx-swift-failing-to-self-register/29104 "2024-07-01T15:50:40Z")
Hello i’m trying to implement self-register on iOS and tried to follow the sample in okta-idx-swift , but after proceeding, it just loops me back at select-enroll-profile. thank you! sample code Task{ do{ … --- ## [Migration of OIDC based authentication to Identity Engine](https://devforum.okta.com/t/migration-of-oidc-based-authentication-to-identity-engine/27980)
**Author:** [@wrzemieniuk](https://devforum.okta.com/u/wrzemieniuk)\ **Replies:** 1\ **Last updated:** [May 14, 2024, 11:49pm UTC](https://devforum.okta.com/t/migration-of-oidc-based-authentication-to-identity-engine/27980 "2024-05-14T23:49:35Z")
We use a self-hosted login page(without sign in widget) using authn API through okta-auth-java. After successful login, user is redirected to /authorize endpoint with sessionToken generated by authn API. Our main require… --- ## [Android redirectUrl deeplink is not called during SSO login](https://devforum.okta.com/t/android-redirecturl-deeplink-is-not-called-during-sso-login/27638)
**Author:** [@gazaryan](https://devforum.okta.com/u/gazaryan)\ **Replies:** 0\ **Last updated:** [April 9, 2024, 6:57am UTC](https://devforum.okta.com/t/android-redirecturl-deeplink-is-not-called-during-sso-login/27638 "2024-04-09T06:57:01Z")
Hi, I’m trying to implement a native SSO login flow based on the dynamic-app sample. The redirectUrl in IdxIdpCapability that I’m receiving looks like this: https://\/v1/authorize?client\_id=\&reque… --- ## [Okta-auth-js idx.register() does not create idx cookie](https://devforum.okta.com/t/okta-auth-js-idx-register-does-not-create-idx-cookie/26646)
**Author:** [@sam1993316](https://devforum.okta.com/u/sam1993316)\ **Replies:** 1\ **Last updated:** [February 9, 2024, 2:41pm UTC](https://devforum.okta.com/t/okta-auth-js-idx-register-does-not-create-idx-cookie/26646 "2024-02-09T14:41:59Z")
I am using okta-auth-js and identity engine SDK for self-service registration. After the final step(proceed) of idx.register() which returns success status. No idx cookie is created although the Set-Cookie response heade… --- ## [Okta Signin Widget with PKCE on Okta Identity Engine fails with: The client is not authorized to use the provided grant type](https://devforum.okta.com/t/okta-signin-widget-with-pkce-on-okta-identity-engine-fails-with-the-client-is-not-authorized-to-use-the-provided-grant-type/26298)
**Author:** [@psilospore](https://devforum.okta.com/u/psilospore)\ **Replies:** 3\ **Last updated:** [January 11, 2024, 8:49pm UTC](https://devforum.okta.com/t/okta-signin-widget-with-pkce-on-okta-identity-engine-fails-with-the-client-is-not-authorized-to-use-the-provided-grant-type/26298 "2024-01-11T20:49:42Z")
Hi, I am using the Okta sign-in widget and I was able to get it working by enabling the setting “Embedded widget sign-in support” on a test application. However, our administrator mentioned that this is insecure and we s… [Next page](https://devforum.okta.com/tag/idx/44.md?match_all_tags=true&page=1&tags%5B%5D=idx)