Closed Bug 1856376 Opened 2 years ago Closed 2 years ago

Okta SSO not working since FF118

Categories

(Core :: Networking, defect)

Product:
Core
Component:
Networking
Version:
Firefox 118
Type:
defect

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1855650

People

(Reporter: firefoxbugzilla1, Unassigned)

Details

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0

Steps to reproduce:

Configure network.negotiate-auth.trusted-uris to <myorg>.kerberos.<okta|oktapreview|okta-emea>.com

Navigate to <myorg>.okta.com

Details here https://help.okta.com/en-us/content/topics/directory/ad-dsso-configure-browsers.htm

A ticket was opened with Okta Support:

Hi -----,

Thank you for contacting Okta Support. My name is ---- and I am happy to assist you. There appears to be a bug with Firefox version 118 (and beta version 119) that causes the 'network.negotiate-auth.trusted-uris' setting to not be respected. This results in users being redirected to the default login page. The Okta System logs will show a "Agentless DSSO redirection to default login page SUCCESS" event with reason: 'dssoPreCheck failed'. These events can be found in the system logs by searching with the following query: outcome.reason eq "dssoPreCheck failed"

As a workaround, we advise rolling back to Firefox version 117 or using alternative browsers such as Microsoft Edge or Google Chrome. Since this is a Firefox-specific issue, kindly file a bug with Firefox support for visibility.

Actual results:

Website prompts for logon

Expected results:

Single Sign On occurs - Redirected to Okta App Page

The Bugbug bot thinks this bug should belong to the 'Core::Networking' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Component: Untriaged → Networking
Product: Firefox → Core

possibly a duplicate of bug 1855650

Hello
Thanks for reporting this. Could you please confirm if you observe this issue only for cross-site similar to Bug 1855650?

Flags: needinfo?(firefoxbugzilla1)

Okta single sign on is working in Nightly 120.0a1 (2023-10-02) (64-bit). Is it possible to apply fix to 118?

Flags: needinfo?(firefoxbugzilla1)
Status: UNCONFIRMED → RESOLVED
Closed: 2 years ago
Duplicate of bug: 1855650
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.