Kia ora/Hello Koha community,

Have any other Koha libraries in the community successfully configured Okta as an Identity provider in Koha?

We have a Koha library, running Koha 24.11. If their patrons:

• 1) Log into Koha via Okta.
• 2) Click the local Koha logout.
• 3) Then try to log back into Koha they receive a 'wrong_csrf_token' error.

We are working our way through their configurations and would really appreciate hearing if others have encountered a similar problem?

Similarly, if you're using Okta successfully, and your users don't encounter this workflow, we would love to hear:

Q1) Have you configured Okta, in your Koha Identity Provider, to use the OAuth or OIDC protocol?

Q2) If using the OIDC protocol, what have you set as your well_known_url?

Q3) Are there any tips, or tricks, you have from setting up the Okta configuration side of things? For example a Okta 'sign-out redirect URIs'?

Any help much appreciated.

Alex