Error: {"errors":["OAuth error"]} error message after testing SSO

Symptom

When a Outreach Admin attempts to test the SSO connection by clicking on "Test", they receive a error: {"errors":["OAuth error"]}

Applies To

• What systems/software are involved?

• Is the issue only specific to a certain environment?

Resolution

We will typically see this failure occur for one or more of the causes mentioned below. Importantly, the Outreach Admin and respective SSO Admin will need to verify if all steps were followed in configuring SSO. 

• Salesforce
• Okta
• Azure
• Google Workspace
• Other SAML IdP (Identity Provider)

Cause

This failure is usually caused by one or more of the following:

1. The email that the user logs into Okta is not exactly identical to the login email within Outreach. 
2. The uploaded certificate is not the one that is generated and attached to the Outreach SSO application that was created.
3. The Assertion Consumer Service (ACS) URL and the Service Provider Entity ID / Audience URI is not configured properly in Okta's configuration.
4. The uploaded certificate has expired.