Description
When configuring Okta Identity Engine (OIE) and testing the configuration, OIDC and ROPG both work but with OIE we get the error Authentication failed, Try signing in again. The logs in Okta show success.
This is because when the DSSO or ADSSO app is in use for Okta, OIE will try to run the sign in attempts through the app, even if the app isn't in use on this device.
Creating a Routing Rule
To circumvent the ADSSO or DSSO workflow and allow the end user to login, create a routing rule.
In the Okta admin dashboard go to Security > Identity Providers > Routing Rules.
Create a new rule for the zones or locations you would like to use and ensure it is set to use the Okta OIE app.
More Resources