...
Add the salesforce domain to the secure origin list. The result should look like the following.
The second NOT secure way ( can be used only for problem detection ).
In Okta administrator menu select Customizations/Other and scroll down the page.
Choose Allow IFrame embedding. This way should not be used in production.
...