❗️Self-hosted Redash 25.1.0 + Okta SAML: CSRF Token Missing after Redirect

[cslince]

Hi Team,

I'm facing an issue integrating Okta SAML with my self-hosted Redash (v25.1.0). After successful authentication via Okta, the user is redirected to:

https://my-domain.com/saml/callback?org_slug=default

But instead of logging in, it shows the following error:

Bad Request 
The CSRF token is missing

I've followed the official documentation for both Okta and Redash configuration. The SAML setup on Okta seems fine and initiates login, but the callback to Redash fails.

Any suggestions or fixes would be highly appreciated.

Thanks!

[eradman]

We have received a number of issues for SAML, but the difficulty is that we do not have a test harness for SAML, and (as far as I know), none of the developers know how to configure a SAML provider.

@cslince are you able to write a tutorial on configuring a SAML provider for manual testing?