# "error\_description": "The resource owner or authorization server denied the request." when testing Okta/Auth0 connection

**URL:** <https://community.auth0.com/t/error-description-the-resource-owner-or-authorization-server-denied-the-request-when-testing-okta-auth0-connection/113309>\
**Category:** Get Help\
**Tags:** oidc-enterprise-connection, connections\
**Created:** [August 10, 2023, 1:48am UTC](https://community.auth0.com/t/error-description-the-resource-owner-or-authorization-server-denied-the-request-when-testing-okta-auth0-connection/113309 "2023-08-10T01:48:44Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![terekhina.maria](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/terekhina.maria/32/49715_2.png) [@terekhina.maria](https://community.auth0.com/u/terekhina.maria)\
**Post date:** [August 10, 2023, 1:48am UTC](https://community.auth0.com/t/error-description-the-resource-owner-or-authorization-server-denied-the-request-when-testing-okta-auth0-connection/113309/1 "2023-08-10T01:48:44Z")

</div>

Hello, I’ve been following the guide [Connect Your Auth0 Application with Okta Enterprise Connection](https://auth0.com/docs/authenticate/identity-providers/enterprise-identity-providers/okta) and was able to get to this error.  
my okta account is a dev account, and my auth0 account is not paid account (since I am trying to understand if it is something we want to use).  
my user (me) is in the Everyone group in Okta and is assigned to the app I created to connect with Auth0; plus, I am a user+tenant in Auth0.  
No sure where to start digging to get to the happy state. Please help.

my Okta app config  
Client ID {client id}  
Client authentication - Client secret

APPLICATION  
App integration name {app name}  
Application type Web  
Grant type - Client Credentials - Client acting on behalf of a user Authorization Code

USER CONSENT  
User consent Require consent  
Terms of Service URI {empty}  
Policy URI {empty}  
Logo URI {empty}

LOGIN  
Sign-in redirect URIs https://{my\_tenant\_name}.auth0.com/login/callback  
Sign-out redirect URIs {empty}  
Login initiated by App Only  
Initiate login URI {empty}

EMAIL VERIFICATION EXPERIENCE  
Callback URI {empty}  
Federation Broker Mode(optional)  
Immediate app access with Federation Broker Mode Disabled

---

<div class="post-metadata">

**Author:** ![alex.brett](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/alex.brett/32/60157_2.png) [@alex.brett](https://community.auth0.com/u/alex.brett)\
**Post date:** [November 25, 2024, 10:20pm UTC](https://community.auth0.com/t/error-description-the-resource-owner-or-authorization-server-denied-the-request-when-testing-okta-auth0-connection/113309/2 "2024-11-25T22:20:18Z")

</div>

Hello @terekhina.maria!

I found a knowledge article that discusses this same error.

[https://community.auth0.com/t/error-with-okta-as-oauth2-identity-provider-oidc-connection/96405](https://community.auth0.com/t/error-with-okta-as-oauth2-identity-provider-oidc-connection/96405)

I hope this helps!

Best,  
Alex

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [December 9, 2024, 10:20pm UTC](https://community.auth0.com/t/error-description-the-resource-owner-or-authorization-server-denied-the-request-when-testing-okta-auth0-connection/113309/3 "2024-12-09T22:20:25Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.

---

<div class="post-metadata">

**Author:** ![Tiffani](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/tiffani/32/75235_2.png) [@Tiffani](https://community.auth0.com/u/Tiffani)\
**Post date:** [July 29, 2026, 4:51pm UTC](https://community.auth0.com/t/error-description-the-resource-owner-or-authorization-server-denied-the-request-when-testing-okta-auth0-connection/113309/4 "2026-07-29T16:51:05Z")

</div>