I am able to open SOTI Surf from the RM app (on the homescreen) and access the okta sso link with no issues prior to enabling kiosk mode. 

I have enabled webfiltering ad whitelisted the URL's needed and this works fine also (without kiosk mode enabled at this point).

The disconnect seems to be when the app is trying to launch the surf browser when kiosk mode is enabled. I'm now getting "You are not allowed to access this page"

I have also added the RM and SOTI Surf bundle ID's to App run control.

Any other ideas why this is happening and what else I can try to resolve this?