Found in WebReports Version 11.0.2.0
Resolved on 2/4/2022. (Release Version 11.0.3.0)

Bug: Saving CORS configuration does not make the changes to the WebReports application.

Example:

Typed in "Testing CORS Allowed Host Text" and when clicking save, it reverts back to what was in the  appsettings.json. Removing the CORS allowed hosts from appsettings.json results in being unable to use Okta with an IFRAME.