Issue with Okta Authorization on iPad After App Protection Policy Enforcement

[inban]

Describe the bug?

We are encountering an issue where the Okta preview login page fails to complete the authorization process on an iPad after it has been enrolled with an App Protection Policy. Notably, the page does not throw any explicit error—it simply does not proceed past the authorization step.

What is expected to happen?

Okta authentication has to successfully complete post app protection policy applied.

What is the actual behavior?

it simply does not proceed past the authorization step

Reproduction Steps?

Enroll an iPad with the App Protection Policy.
Attempt to log in via the Okta preview page.
Observe that the authorization does not complete, and no error is displayed.

Additional Information?

The issue was reproduced using the Microsoft OIDC SDK sample application.
A HAR file capturing the behavior is available.

Please advise on how we can proceed with troubleshooting or if there are known compatibility issues between Okta and App Protection Policies on iOS devices.

SDK Version(s)

MSAL Swift package (version 2.2.0) and Intune SDK (version 20.6.0).

Build Information

No response

[inban]

Error log : Failed to open URL com.oktapreview.cigna-intunemam://com%2Eoktapreview%2Ecigna%3A%2Fcallback%3Fcode%3DSzAW1GMuuJL0NZEFSnMyabd9x%5Fvxshd6D6W0zIskbVU%26state%3DB3E92FB7%2D9C73%2D4758%2D9278%2D732603592604?com.microsoft.intune.mam.appmdmmgtstate=0&com.microsoft.intune.mam.policysource=2&com.microsoft.intune.mam.identity=h33742%40glbcoredev%2Ecom&com.microsoft.intune.mam.policy=2&com.microsoft.intune.mam.identity.oid=501f30d4%2D6498%2D4c7f%2Da6d2%2Ddfcb637ca2ea: Error Domain=NSOSStatusErrorDomain Code=-10814 "(null)" UserInfo={_LSLine=279, _LSFunction=-[_LSDOpenClient openURL:fileHandle:options:completionHandler:]}

Failed to open URL: com.oktapreview.cigna-intunemam://...
Error Domain=NSOSStatusErrorDomain Code=-10814 "(null)"
UserInfo={_LSLine=279, _LSFunction=-[_LSDOpenClient openURL:fileHandle:options:completionHandler:]}

[inban]

Details:
The app fails to open via the redirect URI.
The URL appears to be correctly formed but is not being handled by any installed application.
The device is enrolled in Intune, and the app is expected to be managed under MAM policies.
Making the refresh token persistent does not resolve the issue.
Request: Could you please verify the following?
That the app is correctly installed and registered to handle the com.oktapreview.cigna-intunemam:// URL scheme.
That the redirect URI is properly configured in Okta for this application.
That the Intune MAM policies are correctly applied and the app is compliant.