argo-cd oidc setup with Okta is not working

[man-st]

Hi all,

Have an issue with argo-cd oidc setup with Okta.
Getting the following error when trying to sign in to argo-cd with okta:
"Invalid redirect URL: the protocol and host (including port) must match and the path must be within allowed URLs if provided"

argocd-cm.yaml configuration fragment:

apiVersion: v1
data:
oidc.config: |
name: Okta
issuer: https://demo-ts-onboarding.okta.com/oauth2/aus5ld**********
clientID: 0oa5ld8*********
clientSecret: Zd-pFfK_5s********************
requestedScopes: ["openid", "profile", "email", "groups"]
requestedIDTokenClaims: {"groups": {"essential": true}}
redirectURI: [http://localhost:8080", "https://localhost:8080", "https://localhost:8080/auth/callback", "http://localhost:8080/applications", "https://localhost:8080/applications", "http://localhost:8080/auth/callback"]
secureCookie: false
kind: ConfigMap

Anyone have any ideas?

Thanks

[umarov]

I think you need to set the url field inside oidc.config to be the URL of your argo

[man-st]

Got it right here but it still keeps giving me the below error as soon as I hit the sign in with okta button on the argocd login page.

[umarov]

Where did you set the url? I am not talking about the redirectURL

[EvaBender]

As soon as I set the url to be the argocd URL under the same level as oidc.config and removed the 'redirectURL' everything worked properly for me.

[onkar6699]

@man-st @umarov
what you set under
data:|
url: ?? can you please tell me?
what redirect URI added?

[umarov]

I decided not to use Okta and just use Github. This is what I have:

apiVersion: v1
kind: ConfigMap
metadata:
  labels:
    app.kubernetes.io/name: argocd-cm
    app.kubernetes.io/part-of: argocd
  name: argocd-cm
  namespace: argocd
data:
  url: "https://argocd.yourdomain.com"
  admin.enabled: "false"
  dex.config: |
    connectors:
      - type: github
        id: github
        name: GitHub
        config:
          clientID: $github:oidc-client-id
          clientSecret: $github:oidc-client-secret
          orgs:
          - name: YourOrg

[onkar6699]

the protocol and host (including port) must match and the path must be within allowed URLs if provided
i am getting this error

[onkar6699]

I am not using Dex,I am using our own IDP

[onkar6699]

ArgoCD OIDC Config
url: https://argocd.example.com/ (nginx exposed app)
oidc.config: |
name: MYIDP
issuer: myissuerURL
clientID: 0oa9abcddddefgh123AB5d7
clientSecret: ABCDEFG1234567890abcdefg
requestedScopes: ["openid", "profile", "email", "groups"]
requestedIDTokenClaims: {"groups": {"essential": true}}

this is my config

[onkar6699]

Can you please tell me what would be issue for above error @umarov

[umarov]

I have no idea. I am not using the setup you have.

[onkar6699]

Okay no problem thanks