We are migrating our Pega application login to Okta OIDC. After enabling the OIDC Authentication Service, Pega generates the login URL in the standard OIDC pattern:

/prweb/PRAuth/<oidc-service-alias>

Based on Pega documentation, OIDC authentication must use the PRAuth servlet with the service alias, and /prweb or /prweb/PRServlet continue to invoke basic authentication only and cannot be repurposed for OIDC within Pega.

The OIDC Login URL itself is read only and is always based on the service alias.

Requirement:

We want users to continue accessing the application using the familiar URL:

https://<host>/prweb

And have Pega (or an external mechanism) redirect them automatically to:

/prweb/PRAuth/<oidc-service-alias>