Found in WebReports Version 22.214.171.124
Resolved on 2/4/2022. (Release Version 126.96.36.199)
Bug: Saving CORS configuration does not make the changes to the WebReports application.
Typed in "Testing CORS Allowed Host Text" and when clicking save, it reverts back to what was in the appsettings.json. Removing the CORS allowed hosts from appsettings.json results in being unable to use Okta with an IFRAME.