Beginning in October, Okta release version notations are changing from year.month to year.week. For example, 2026.10.0 will become 2026.41.0, where 41 indicates that week of the year that the deployment occurs. More information is available in this knowledge base article.

On this page

Add a trusted origin and enable CORS

For web applications, you have to identify your app's URL as a trusted origin and enable CORS:

  1. In the Admin Console, go to Security > API.
  2. On the API page, select the Trusted Origins tab.
  3. Click Add Origin and then enter a name for the organization origin.
  4. In the Origin URL field, specify the base URL of the website that you want to allow cross-origin requests from. If you're using the sample app, specify http://localhost:8000/.
  5. Under Type, select the CORS and Redirect check boxes.
  6. Click Save.