By default, Okta will redirect the user to the Okta dashboard upon unlocking their account or resetting their password.
This is an undesirable experience for CIAM applications as users are expect to be redirected to the application.
Okta supports a query string called
fromURI to determine where to redirect the user. Simply append the URI in an url safe encoding to the account operation links. Feel free to use this URL encoding tool to encode the URI before appending it.
In addition to appending the query string, you'll need to add this URI as a trusted origin within the admin dashboard (Security > API > Trusted Origin > Add Origin).
Below are some examples based on our default templates using a encoded URI of "https://YOUR_APP_URI_HERE.com" as
Example: Forgot Password
Example: User Activation
Example: Unlock Account
If your tenant requires more than one email template due to multiple applications, Okta does not support this out of the box. However, you can leverage the user's locale property to serve different emails per application. More information can be found here.