diff --git a/samples/components/oauth/redshift.okta.iam-idc.xml b/samples/components/oauth/redshift.okta.iam-idc.xml
new file mode 100644
index 00000000..b1a1eb44
--- /dev/null
+++ b/samples/components/oauth/redshift.okta.iam-idc.xml
@@ -0,0 +1,68 @@
+<?xml version="1.0" encoding="utf-8"?>
+<pluginOAuthConfig>
+  <dbclass>redshift</dbclass>
+  <oauthConfigId>custom_redshift_okta</oauthConfigId>
+  <clientIdDesktop>$copy_client_id_from_okta_oidc_app</clientIdDesktop>
+  <clientSecretDesktop>$copy_client_secret_from_okta_oidc_app</clientSecretDesktop>
+  <redirectUrisDesktop>http://localhost:55556/Callback</redirectUrisDesktop>
+  <redirectUrisDesktop>http://localhost:55557/Callback</redirectUrisDesktop>
+  <redirectUrisDesktop>http://localhost:55558/Callback</redirectUrisDesktop>
+  <authUri>https://$copy_okta_host_value.okta.com/oauth2/default/v1/authorize</authUri>
+  <tokenUri>https://$copy_okta_host_value.okta.com/oauth2/default/v1/token</tokenUri>
+  <scopes>openid</scopes>
+  <scopes>email</scopes>
+  <scopes>profile</scopes>
+  <scopes>offline_access</scopes>
+  <capabilities>
+    <entry>
+      <key>OAUTH_CAP_FIXED_PORT_IN_CALLBACK_URL</key>
+      <value>true</value>
+    </entry>
+    <entry>
+      <key>OAUTH_CAP_PKCE_REQUIRES_CODE_CHALLENGE_METHOD</key>
+      <value>true</value>
+    </entry>
+    <entry>
+      <key>OAUTH_CAP_REQUIRE_PKCE</key>
+      <value>true</value>
+    </entry>
+    <entry>
+      <key>OAUTH_CAP_SUPPORTS_STATE</key>
+      <value>true</value>
+    </entry>
+    <entry>
+      <key>OAUTH_CAP_CLIENT_SECRET_IN_URL_QUERY_PARAM</key>
+      <value>true</value>
+    </entry>
+    <entry>
+      <key>OAUTH_CAP_SUPPORTS_GET_USERINFO_FROM_ID_TOKEN</key>
+      <value>true</value>
+    </entry>
+  </capabilities>
+  <accessTokenResponseMaps>
+    <entry>
+      <key>ACCESSTOKEN</key>
+      <value>access_token</value>
+    </entry>
+    <entry>
+      <key>REFRESHTOKEN</key>
+      <value>refresh_token</value>
+    </entry>
+    <entry>
+      <key>id-token</key>
+      <value>id_token</value>
+    </entry>
+    <entry>
+      <key>access-token-issue-time</key>
+      <value>issued_at</value>
+    </entry>
+    <entry>
+      <key>access-token-expires-in</key>
+      <value>expires_in</value>
+    </entry>
+    <entry>
+      <key>username</key>
+      <value>preferred_username</value>
+    </entry>
+  </accessTokenResponseMaps>
+</pluginOAuthConfig>
\ No newline at end of file